If you make a data-access request in GDPR you might actually get a massive CSV file with this data in it. Obviously some automated system put it together, not control F, but the legal team totally could be using CSV