Are users reaching out to your team when they want to request their data?
Where is this data being pulled from?
If you go to administration --> membership --> members --> search on that specific members name --> export as CSV then a screen should come up where it asks you what associated data/ information you would like to download in the report. A big part of this export is a section called "Profile Fields" where it should list out all enabled profile fields you have - and allow you to select which profile fields to include in the downloaded report.
If the request is done in the context of GDPR, you cannot withhold data you have on a person. It is a person's right to know what you are gathering about this person and a request of that nature should be satisfied in full.
I have dealt with this since 2028 when GDPR became a law. A good tactic is to publish in the help files or T&C which fields you are actually collecting and for which purpose they are used.
It usually leads to an internal debate about needs and necessities.
