.. based on what some lawyer said about case law, before the legislation even went live. Here's some discussion about it on the r/gdpr subreddit, the consensus

.. based on what some lawyer said about case law, before the legislation even went live. Here's some discussion about it on the r/gdpr subreddit, the consensus seems to be emails probably are covered. https://www.reddit.com/r/gdpr/comments/8lsgwm/can_you_request_emails_that_include_your_name/ https://www.reddit.com/r/gdpr/comments/8lsgwm/can_you_reques... One person sums it up as: Emails that mention you are likely to count as personal data. However, your right to access that data must be balanced with the right to privacy of anyone else mentioned in the emails. The company would be entitled to redact the emails before sending them, and potentially to refuse the request entirely if that would require excessive effort.