The Data Protection Commission (DPC) deals with data subjects themselves in relation to their own data protection rights. However, if someone wishes to have a third party act on their behalf, then a signed letter of authority, by that individual will be required. The DPC will obtain the authorisation directly from the individual themselves and will therefore require their contact details in order to do so.