The Personal Data Protection Law grants certain rights to natural persons whose personal data is processed. These rights include learning whether data is being processed, learning the purpose of processing, and requesting correction or deletion of the data.
Data subjects should first submit their requests to the relevant data controller in writing, or via methods such as registered electronic mail or secure electronic signature.
If the data controller rejects the application, gives an inadequate response, or fails to respond within the deadline, the data subject may file a complaint with the Personal Data Protection Board.
Since claims of data breaches must be assessed together with the circumstances of the specific case and the current state of the applicable legislation, it is advisable to seek legal support on this matter.