Personal Data (Privacy) Ordinance
A Guide For Data Users. No. 2
Compliance With Data Access And Correction Requests

The booklet provides practical and detailed guidance on how data users should comply with requests made by individuals to access and correct their personal data.

MS Word 6.0 (125KB)

PDF (32KB)

CONTENTS

1. The Right of Subject Access
   
   
2. Compliance with Data Access Request
   
   
3. Non-Compliance with Data Access Request
   
   
4. Notification of Non-Compliance with Data Access Request
   
   
5. The Right of Data Correction Compliance with Data Correction Request
   
   
6. Compliance with Data Correction Request
   
   
7. Non-Compliance with Data Correction Request
   
   
8. Notification of Non-Compliance with Data Correction Request
   
   
9. Erasure of Personal Data No Longer Required
   
   
10. Log Book to be Kept by Data User
    
    
11. Collection of Fees by Data User
    
    
12. Service and Language of Certain Notices
    
    
13. Glossary

SECTION 1

The Right of Subject Access

1.1 The Ordinance provides that an individual or a relevant person on behalf of an individual is entitled to make a data access request to : (a) ascertain from the data user whether the data user holds personal data of which he is the data subject; and (b) if the data user holds such data, to be supplied with a copy of such data.

[section 18(1) (a) & (b) of the Ordinance.]