Companies should be able to identify all the data they hold on their client.