A business has to overcome numerous challenges when it receives a request for access to personal data and it has a short time in which to comply. However, if it makes a genuine endeavour to do so, its data protection regulator may be lenient towards it.