A data subject is entitled at any time, by notice given to the controller, to require the controller—
on the ground that, for specified reasons relating to the situation of the data subject, the processing in question is an unwarranted interference with the interests or rights of the data subject.
Where the controller—
the controller is not obliged to comply with the notice unless the controller is supplied with that further information.
The controller must, before the end of 21 days beginning with the relevant time, give a notice to the data subject—
If the controller does not comply with a notice under subsection (1) to any extent, the data subject may apply to a court for an order that the controller take steps for complying with the notice.
If the court is satisfied that the controller should comply with the notice (or should comply to any extent), the court may order the controller to take such steps for complying with the notice (or for complying with it to that extent) as the court thinks fit.
A court may make an order under subsection (5) in relation to a joint controller whose responsibilities are determined in an arrangement under section 104 only if the controller is responsible for compliance with the obligation to which the order relates.
The jurisdiction conferred on a court by this section is exercisable by the High Court or, in Scotland, by the Court of Session.
In this section, "the relevant time", in relation to a notice under subsection (1), means—