Personal Data Protection 31 (b) any opinion made by the Commissioner under section 25, including particulars of withdrawal of previous opinions. Non-compliance with code of practice 29. A data user who fails to comply with any provision of the code of practice that is applicable to the data user commits an offence and shall, on conviction, be liable to a fine not exceeding one hundred thousand ringgit or to imprisonment for a term not exceeding one year or to both. Division 4 Rights of data subject Right of access to personal data 30. (1) An individual is entitled to be informed by a data user whether personal data of which that individual is the data subject is being processed by or on behalf of the data user. (2) A requestor may, upon payment of a prescribed fee, make a data access request in writing to the data user— (a) for information of the data subject’s personal data that is being processed by or on behalf of the data user; and (b) to have communicated to him a copy of the personal data in an intelligible form. (3) A data access request for any information under subsection (2) shall be treated as a single request, and a data access request for information under paragraph (2)(a) shall, in the absence of any indication to the contrary, be treated as extending also to such request under paragraph (2)(b). (4) In the case of a data user having separate entries in respect of personal data held for different purposes, a separate data access request shall be made for each separate entry. (5) Where a data user does not hold the personal data, but controls the processing of the personal data in such a way as to prohibit the data user who holds the personal data from