Article 10 of the Personal Data Protection Act provides that the right to information is one of the basic rights of the data subject. The entity collecting personal data should ensure that the right to information of the data subject is properly exercised. In other words, the data controller should inform the data subject of its identity, or the identity of its representative, as well as the purposes and other information pertaining to the data processing, by means of its personal data collection statement, which should be made available to the employees when they begin employment.