Subject access requests: disclosure of third party personal data without consent By Zoë Wigan In this case, the High Court ruled that personal data about a third party should not be disclosed in the absence of his consent, and provided useful guidance to data controllers.