GDPR gives certain rights to the data subject (the persons whose data is processed), such as right to information and register excerpts. The data subject is entitled to information on when and how his or her personal data is processed and is entitled to control this data (i.e. under certain circumstances he or she can demand correction, deletion or blocking of information etc.). The data controller should give information when the data is collected and when the data subject so require. In certain cases specific information should be provided to the data subject (e.g. if there is a breach of personal data or similar, a personal data incident).