Personal Data Protection Act, No. 9 of 2022 7 (e) establishes internal oversight mechanisms; (f) has a mechanism to receive complaints, conduct of inquiries and to identify personal data breaches; (g) is updated based on periodic monitoring and assessments; and (h) facilitates the exercise of rights of data subjects under sections 13, 14, 15, 16 and 18, for the purpose of complying with the obligations referred to in sections 5, 6, 7, 8, 9, 10 and 11. (2) The Authority shall from time to time issue such guidelines in respect of the Data Protection Management Programme. PART II RIGHTS OF DATA SUBJECTS 13. (1) Every data subject shall have the right to access to personal data of such data subject and to be provided with a confirmation as to whether such personal data has been processed and such information referred to in Schedule V, upon a written request made by such data subject to the controller. Right of access to personal data (2) The controller shall, upon receipt of a written request made by the data subject under subsection (1), provide the data subject with such information required to be provided under Schedule V, subject to section 17. 14. (1) Every data subject shall have the right to withdraw his consent at any time upon a written request made by such data subject if such processing is based on the grounds specified in item (a) of Schedule I or item (a) of Schedule II of this Act: Right of withdrawal of the consent and the right to object to processing