Article 9
Personal Data Subject's Right of Access
The data subject has the right to easy access to information on the processing of his data, which should be made available in a clear, adequate and ostensible manner about, among other features provided for in regulations for compliance with the principle of free access:
I - specific purpose of processing;
II - form and duration of the processing activity, observing the commercial and industrial secrets;
III - controller identification;
IV - controller contact information;
V - information about the shared use of data by the controller and the purpose;
VI - responsibilities of the agents who will perform the processing activity; and
VII - rights of the data subject, with explicit mention of the rights contained in art. 18 of this Law.
- 1. In the event that consent is required, it shall be considered null and void if the information provided to the data subject is misleading or abusive in content or has not been previously presented transparently, clearly and unambiguously.
- 2. In the event that consent is required, if there are changes of purpose for the processing of personal data not compatible with the original consent, the controller shall inform the data subject in advance of the changes of purpose, and the data subject may revoke the consent if he disagrees with the changes.
- 3. When the processing of personal data is a condition for the provision of a product or service or for the exercise of the right, the data subject shall be clearly informed of this fact and the means by which he may exercise the rights listed in art. 18 of this Law.