Created claim: comment(P126): In a survey of more than 150 companies, the authors demonstrate that organizations willingly provide highly sensitive information in response to GDPR right of access requests with little or no verification of the individual making the request.