“People will be able to request details of the data held about them at any time, and can require its removal in a wide range of circumstances. This is not only fundraising data but information held about everyone in an arts organisation’s database, from audiences and artists to volunteers.”