The data controller shall implement suitable measures to safeguard the data subject’s fundamental rights, freedoms and interests, including the rights to —

(a) obtain human intervention on the part of the data controller;

(b) express the data subject’s point of view; and

(c) contest the decision.