A surge in data subject access requests (DSARs) is costing UK businesses millions of pounds, with the average case costing a small to medium enterprise around £20,000, according to a new analysis from Loch Associates.

The law firm has witnessed a significant rise in DSARs across most industry sectors, with organisations of all sizes affected. Many requests are believed to be being made as a fishing expedition to see what data an employer has to disclose, the firm warned.