10 Personal Data Protection Act, No. 9 of 2022 (e) the rights and freedoms of other persons under any written law; (f) subject to the provisions of subsection (4), the technical and operational feasibility of the controller to act on such request; (g) subject to the provisions of subsection (4), the inability of the controller to establish the identity of the data subject; or (h) the requirement to process personal data under any written law. (3) A controller shall, record the reasons for any refusal under subsection (2) and submit such records to the Authority upon a written request from the Authority. (4) Where a controller is unable to establish the identity of a data subject making a request under sections 13, 14, 15 or 16, such controller may, request the data subject to provide additional information to enable the controller to carry out such requests. (5) Any right conferred on a data subject under this Part may be exercised– (a) where the data subject is a minor, by parents or a person who has the parental authority over the minor or who has been appointed as his legal guardian; or (b) where the data subject is physically or mentally unfit, by a person who has been appointed as his guardian or administrator by a Court; or (c) by a person duly authorized in writing by the data subject to make a request under this Part except in the cases referred to in paragraphs (a) and (b); or