32 Laws of Malaysia ACT 709 complying, whether in whole or part, with the data access request under subsection (2) which relates to the personal data, the firstmentioned data user shall be deemed to hold the personal data and the provisions of this Act shall be construed accordingly. Compliance with data access request 31. (1) Subject to subsection (2) and section 32, a data user shall comply with a data access request under section 30 not later than twenty-one days from the date of receipt of the data access request. (2) A data user who is unable to comply with a data access request within the period specified in subsection (1) shall before the expiration of that period— (a) by notice in writing inform the requestor that he is unable to comply with the data access request within such period and the reasons why he is unable to do so; and (b) comply with the data access request to the extent that he is able to do so. (3) Notwithstanding subsection (2), the data user shall comply in whole with the data access request not later than fourteen days after the expiration of the period stipulated in subsection (1). Circumstances where data user may refuse to comply with data access request 32. (1) A data user may refuse to comply with a data access request under section 30 if— (a) the data user is not supplied with such information as he may reasonably require— (i) in order to satisfy himself as to the identity of the requestor; or (ii) where the requestor claims to be a relevant person, in order to satisfy himself— (A) as to the identity of the data subject in relation to whom the requestor claims to be the relevant person; and