210 (e) compliance is not reasonably practicable in the circum_ stances ofthe particular case; or (f) the information shall - (i) (ii) not be used in a form in which the data subject may be identified; or be used for histor-ical, statistical or research pur_ poses. (5) A dara controller shall process personal information only upon notification to the Commission. ,dccess to and challenges of personal inforrnation 26. (1) A data subject who provides adequate proof of identity, shall have a right to lequest(a) a data controller to confirm, fi.ee of charge, whether or. not the data controlle'holds personal infor.mation about the data subject; and (b) from a data conkoller, personal infor.mation about the data subject held by the data contloller., including infor_ mation about the identity of a1l third parties, or cate_ golies of thild parties who have ol have had, access to the information - (i) within (ii) at a prescribed fee; (iii) in a reasonable manner and for.mat; and (iv) in a (2) a presclibecl time; folm that is generally understandabie. whele the data controller.denies a datasubject a reqnest made in terms of subsection (1) above, the clata subject shall be Lntitled to be given written reasons for.the denial.