When we presented Surfshark with a Data Subject Access Request, the provider was quick to fulfill its GDPR obligations, but the amount of data held on us was alarming

Under GDPR and similar privacy regulations, VPN providers are legally required to share the data they hold on you when asked. I decided to put this basic data right to the test.