Under the existing Data Protection Directive these notes are subject to people making a Subject Access Request.