ICO guidelines. Know your GDPR data rights
Under the GDPR, any organisation that handles personal information such as names, email addresses, phone numbers, and payment details must put robust measures in place to keep this data safe. And the more you know about the GDPR, the easier it is to hold organisations to account when they fail to do this.