If your, for example, immigration report is part of the MOI, then you have to ask the MOI, and actually also MOFA, maybe, because that’s where it is issued. The decentralized architecture of the data protection authority indeed makes the law — which is very clearly written — like you can get a copy of your reports and requesting for update and deletion when the purpose is gone, and things like that.