There may be a storage data controller in between these two.

For the purposes of the Act you are a 'data controller'.

If you would like to see this please contact the data controller named above.

This may be difficult to ascertain by the data controller.

They will both be data controllers for the purpose of the scheme.

It is a consequence of the time limit data controllers must meet in making their response.

Registration as a data controller is subject to renewal every two years (section 50).

All data controllers must comply with the rights given to individuals by the Act in relation to the personal information held on them.

The data controller has to give certain information when the data are collected.

Written application must be made to the data controller.

"The identity of the data controller or its representative"

If the data controller does not comply with the enforcement order, it becomes a criminal matter.

If action is required by the data controller this will be identified through discussion, and possibly negotiation.

The person holding information ('data') about you is called the data controller.

A "data controller" - someone who holds your information - must abide by them.

The exemption only applies to the information which the data controller is required to publish.

Therefore, if the data controller has that consent, in either case, this requirement is satisfied.

A data controller can only have one register entry.

An individual should have the right to confirm whether the data controller has information about him/herself and find out what that information is.

As a general rule it also includes information regarding the intentions of the data controller towards the individual.

We take our responsibilities as data controllers very seriously.

Some countries rely on criminal sanctions to modify the behaviour of data controllers.

- To exercise your rights or to obtain any further information, you can apply directly to the data controller involved.

In the situation that a data controller does not take all reasonable steps then they will be fined heavily.

It will also continue to develop and implement training programmes for staff and data controllers.