How would an individual get access to their data without a lawyer?