One month, a copy, and the recipients by name. Subject access tooling is mostly bought against the easiest of the three.
A composite savings bank, two part-time privacy staff and two hundred and forty thousand hours of call recordings. This page sets the criteria and the weights; the ranked verdict follows the testing.