Under which act should data subjects be able to exercise their rights?

The correct answer is the Data Privacy Act because it explicitly establishes the framework that allows data subjects to exercise their rights concerning personal data. This act typically defines the rights of individuals in relation to their personal data, such as the right to access, rectify, or delete their data. It is designed to protect personal information from misuse and to ensure that individuals have control over their personal data.

Other acts mentioned, such as the Data Protection Act and the Digital Rights Act, may also address aspects of data and privacy, but the Data Privacy Act focuses specifically on the rights of data subjects. The Information Freedom Act relates more to the public's right to access information held by public authorities rather than specifically dealing with the rights of individuals regarding their personal data.