New order in September narrowed access request down to data of UK citizens.