Increased data subject access rights when the General Data Protection Regulation takes effect next month could ‘wreak havoc’, Collyer Bristow solicitors Patrick Wheeler and Mette Marie Sutton write in this week’s NLJ. They report concerns that individuals could use data requests as a weapon against businesses. In the context of employment disputes, data requests are already being used to obtain early disclosure of information. Wheeler and Sutton note that ‘it is easy to see how a co-ordinated set of requests by a large number of individuals made at the same time could be time consuming, expensive and cause huge disruption’.