Data breach and data subject rights assistance

Who is responsible for enabling data subjects to exercise their rights?
Does Remote inform clients when there's a personal data breaches that affects contractors and assigned employees?
What are the technical and organizational measures (TOMs) implemented at Remote to comply with data protection obligations?