I have a complaint ongoing with a medical organisation which has become quite heated. Because there have been issues with how transparent the organisation in question has been I requested copies of all emails relating to me via a Subject Access Request. I have now received these emails but they include personal data relating to staff - one regarding someone's disciplinary record and the other the home address of a member of staff. I have told the organisation, they said they would deal with it. Is this all I need to do? This seems very serious to me.