Personal Data Protection Regulations 2021 · As enacted · Part 2 · Requests for Access to and Correction of Personal Data
4. Duty to respond to request under section 21(1) of Act
Feedback & supportSubject to section 21(2), (3), (3A) and (4) of the Act and regulations 6 and 7(3), an organisation must respond to each request made to it under section 21(1) of the Act on or after 1 February 2021 as accurately and completely as necessary and reasonably possible.
The organisation must provide an applicant access to the applicant’s personal data requested under section 21(1) of the Act on or after 1 February 2021 —
by providing the applicant with a copy of the personal data and use and disclosure information in documentary form;
if sub‑paragraph (a) is impracticable in any particular case, by allowing the applicant a reasonable opportunity to examine the personal data and use and disclosure information; or
in any other form requested by the applicant as is acceptable to the organisation.
Subregulation 1
Subject to section 21(2), (3), (3A) and (4) of the Act and regulations 6 and 7(3), an organisation must respond to each request made to it under section 21(1) of the Act on or after 1 February 2021 as accurately and completely as necessary and reasonably possible.
Subregulation 2
The organisation must provide an applicant access to the applicant’s personal data requested under section 21(1) of the Act on or after 1 February 2021 —
by providing the applicant with a copy of the personal data and use and disclosure information in documentary form;
if sub‑paragraph (a) is impracticable in any particular case, by allowing the applicant a reasonable opportunity to examine the personal data and use and disclosure information; or
in any other form requested by the applicant as is acceptable to the organisation.