Personal Data Protection 21 (2) It shall be the duty of a data user to take all reasonable steps to ensure that all personal data is destroyed or permanently deleted if it is no longer required for the purpose for which it was to be processed. Data Integrity Principle 11. A data user shall take reasonable steps to ensure that the personal data is accurate, complete, not misleading and kept up-to-date by having regard to the purpose, including any directly related purpose, for which the personal data was collected and further processed. Access Principle 12. A data subject shall be given access to his personal data held by a data user and be able to correct that personal data where the personal data is inaccurate, incomplete, misleading or not up-to-date, except where compliance with a request to such access or correction is refused under this Act. Division 2 Registration Application of this Division 13. (1) This Division shall apply to a data user who belongs to a class of data users as specified in the order made under subsection 14(1). (2) A data user who belongs to a class of data users not specified in the order made under subsection 14(1) shall comply with all the provisions of this Act other than the provisions of this Division relating to the registration of data users and matters connected thereto. Registration of data users 14. (1) The Minister may, upon the recommendation of the Commissioner, by order published in the Gazette, specify a class of data users who shall be required to be registered as data users under this Act.