Data access request

Hi, I work for a small charity and I was asked for the first time by a staff member to give them access to their data. We need some support and guidance how to handle this carefully. Anyone out there who knows how to access that help from other organisations/networks etc? Thanks