Your data protection rights

You have the following rights:

These rights can only be exercised against controllers who must respond in a timely and appropriate manner. Regulation 140 of the Implementing Regulations makes it clear that the exercise of rights, or the associated obligations of controllers, cannot be removed or restricted by any enactment or rule of law which otherwise prohibits or restricts the disclosure of the personal data or authorises the withholding of such personal data.