There are laws to that effect, that they should disclose what they have on you, for instance, in the Netherlands there is a law that is called the 'wet bescherming persoonsgegevens' (law on protection of personal information), which gives you the explicit right to request all information that is kept on you, and to request deletion of such information.