A secure and privacy-preserving architecture for authenticating data subjects to enforce their data rights, utilizing eIDs and attribute-based credentials.