(1) Subject to subsection (4) and section 94, a controller shall ensure that the data subject is provided with, or, as appropriate, has made available to him or her, the information specified in subsection (2) in relation to personal data relating to him or her within a reasonable period after the date on which the controller obtains the personal data concerned, having regard to the circumstances in which the data are or are to be processed.
(2) The information to which subsection (1) applies is:
(a) the identity and the contact details of the controller;
(b) the contact details of the data protection officer of the controller, where applicable;
(c) the purpose for which the personal data are intended to be processed or are being processed;
(d) information detailing the right of the data subject to request from the controller access to, and the rectification or erasure of, the personal data;
(e) information detailing the right of the data subject to lodge a complaint with the Commissio
…