I like the auditor's take on this: "I see no data protection issues for these requests, data protection only applies to consumers not businesses so there shoul

I like the auditor's take on this: "I see no data protection issues for these requests, data protection only applies to consumers not businesses so there should be no issues with this information." The Data Protection Act applies to individuals within the EEA trusted circle nations, full stop. Whether or not the information being requested requires individual consent under the DPA is a different point altogether.