Personal Data (Privacy) Ordinance
A Guide For Data Users No. 3
Outline Action Plan For Complying with the Data Protection Principles

ACTION 6 - Comply with Data Access and Correction Requests

Data Protection Principle 6 - access to personal data

• Familiarise yourself with the requirements for complying with requests by individuals to ascertain whether you hold a data pertaining to them, to obtain a copy of such data and to correct such data.
  
  
• Ensure you have administrative arrangements for handling such requests. For example, you need to designate an individual as having the responsibility for receiving requests of this nature. That individual will need to have the authority to seek a response to a particular request from those responsible within the organisation for any data to which it relates. It is also advisable to have in place a system for checking progress in responding to such requests to ensure that they are dealt with within the 40 day period prescribed by the Ordinance.