8 Data Protection Act, 2018 - 5. (a) unless it is supplied with such information as it may reasonably require in order to satisfy itself as to the identity of the person making the request and to locate the personal data which that person seeks; (b) if compliance with the request will be in contravention of the exemptions contained in Part IV or of any duty of confidentiality recognised by law; (c) where another person who can be identified from the personal data consents to the disclosure of his or her personal data to the person making the request; or (d) where the body obtains the written approval of the Information Commissioner. (2) Where a public body or a private body refuses to give access to personal data, its Chief Executive Officer shall state in the notice given pursuant to section 15 (2)(a)– (a) that the personal data does not exist; or (b) the specific provision of this Act on which refusal was based or the provision on which a refusal could reasonably be expected to be based if the personal data existed, and that the person who made the request has the right to make a complaint to the Information Commissioner about the refusal. (3) Where a Chief Executive Officer fails to give access to personal data requested under section 14 within the time limits set out in this Act, he or she shall, for the purposes of this Act, be deemed to have refused to give access. 17. Form of access. (1) Where a data subject is to be given access to personal data requested pursuant to section 14, the public body or private body shall– (a) permit the data subject to examine the personal data; or (b) provide the data subject with a copy of the personal data. (2) Where access to personal data is given under this Act and the data subject to whom access is to be given has a sensory disability and requests that access be given in an alternative format, access shall be given in an alternative format if – (a) the personal data already exists under the control of a public body or a private body in an alternative format that is acceptable to the person; or (b) the Chief Executive Officer considers it to be reasonable to cause the personal data to be converted to an alternative format. 18. Right of rectification of personal data. (1) Where personal data that is processed by a public body or a private body to which access has been given, contains personal data which the data subject claims(a) is incomplete, incorrect, misleading, or excessive; (b) is not relevant to the purpose for which the document is held; the body shall, upon application of the data subject, cause the data to be amended upon being satisfied of the claim.