Personal Data Protection Regulations 2021 · As enacted · Part 2 · Requests for Access to and Correction of Personal Data
3. How to make request
Feedback & supportA request to an organisation must be made in writing and must include sufficient detail to enable the organisation, with a reasonable effort, to identify —
the applicant making the request;
in relation to a request under section 21(1) of the Act, the personal data and use and disclosure information requested by the applicant; and
in relation to a request under section 22(1) of the Act, the correction requested by the applicant.
A request must be sent to the organisation —
in accordance with section 48A of the Interpretation Act (Cap. 1);
by sending the request to the organisation’s data protection officer in accordance with the business contact information provided under section 11(5) of the Act; or
in any other manner that is acceptable to the organisation.
Subregulation 1
A request to an organisation must be made in writing and must include sufficient detail to enable the organisation, with a reasonable effort, to identify —
the applicant making the request;
in relation to a request under section 21(1) of the Act, the personal data and use and disclosure information requested by the applicant; and
in relation to a request under section 22(1) of the Act, the correction requested by the applicant.
Subregulation 2
A request must be sent to the organisation —
in accordance with section 48A of the Interpretation Act (Cap. 1);
by sending the request to the organisation’s data protection officer in accordance with the business contact information provided under section 11(5) of the Act; or
in any other manner that is acceptable to the organisation.