REGULATION ON PROCEDURES AND PRINCIPLES REGARDING RESPONSES TO DATA SUBJECT REQUESTS