Rights and Duties of Data Principals