Skip to content
In force2020 Revised Edition

Part 3 · General Rules with Respect to Protection of and Accountability for Personal Data

12. Policies and practices

Feedback & support

An organisation must —

(a)

develop and implement policies and practices that are necessary for the organisation to meet the obligations of the organisation under this Act;

(b)

develop a process to receive and respond to complaints that may arise with respect to the application of this Act;

(c)

communicate to its staff information about the organisation’s policies and practices mentioned in paragraph (a); and

(d)

make information available on request about —

(i)

the policies and practices mentioned in paragraph (a); and

(ii)

the complaint process mentioned in paragraph (b).

Report

Part 4

Collection, Use and Disclosure of Personal Data

Part 5

Access to and Correction of Personal Data

Part 6

Care of Personal Data

Part 6A

Notification of Data Breaches

Part 7

Part 8

Part 9

Do Not Call Registry

Part 9A

Dictionary Attacks and Address‑Harvesting Software

Part 9B

Offences Affecting Personal Data and Anonymised Information

Part 9C

Enforcement

Part 9D

Appeals

Part 10

General

Schedules