OBLIGATIONS OF DATA CONTROLLER