Personal Data (Privacy) Ordinance
A Guide For Data Users. No. 2
Compliance With Data Access And Correction Requests

GLOSSARY

"correction", in relation to personal data, means rectification, erasure or completion.

"data" means any representation of information (including an expression of opinion) in any document, and includes a personal identifier.

"data access request" means a request under section 18 of the Ordinance.

"data correction request" means a request under section 22(1) of the Ordinance. [In effect, a request for correction of personal data which is consequent on a data access request in relation to that data.]

"data subject", in relation to personal data, means the individual who is the subject of the data.

"data user", in relation to personal data, means a person who, either alone or jointly or in common with other persons, controls the collection, holding, processing or use of the data.

"inaccurate", in relation to personal data, means the data is incorrect, misleading, incomplete or obsolete.

"personal data" means any data -

1. relating directly or indirectly to a living individual;
   
   
2. from which it is practicable for the identity of the individual to be directly or indirectly ascertained; and
   
   
3. in a form in which access to or processing of the data is practicable.

"relevant person", in relation to an individual (howsoever the individual is described), means -

1. where the individual is a minor, a person who has parental responsibility for the minor;
   
   
2. where the individual is incapable of managing his own affairs, a person who has been appointed by a court to manage those affairs;
   
   
3. in any other case, a person authorised in writing by the individual to make a data access request, a data correction request, or both such requests, on behalf of the individual.

[section 2(1) of the Ordinance.]