Chapter 3 Rights of the data subject