Right of access 31. (1) Any data subject who proves his/her identity has the right to obtain, without any explanation and free of charge, from the controller or his/her representative, if any: (a) information on whether or not data relating to him/her is being processed, as well as information regarding the purposes of the processing, the categories of data the processing relates to, and the categories of recipients the data is disclosed to; (b) communication of the data being processed in an intelligible form, as well as of any available source of information; (c) information about the basic logic involved in any automatic processing of data relating to him/her in case of automated decision making; (d) information regarding his/her right of complaint under this Act chapter and his/her right to consult the register referred to in section article 29 if necessary. (2) (a) To obtain such information the data subject shall submit a signed and dated request to the controller or the controller’s appointed data protection officer. (b) The Authority shall be entitled to specify further conditions for the application of this paragraph (2) (a). (3) (a) Where sensitive personal data is processed for the purpose of scientific research and there is no evident risk of infringement of the data subject's right to protection of his/her privacy and the data being used to impose measures or take decisions with regard to an individual, informing the data subject may be postponed until the moment the research is concluded, but only to the extent that informing the data subject would significantly prejudice the research. (b) The application of sub-paragraph (a) shall be subject to In this case the data subject having must have given prior written consent to the processing of his/her personal data for scientific research purposes given to the data controller. his/her previous written consent to the processing of personal data relating to him/her for scientific research purposes and to postponing, for that reason, the moment at which he is informed. Draft Data Protection Bill Version 1.0 40