Personal Data Protection
37
(B) that the requestor is the relevant person
in relation to the data subject;
(b) the data user is not supplied with such information as
he may reasonably require to ascertain in what way
the personal data to which the data correction request
relates is inaccurate, incomplete, misleading or not
up-to-date;
(c) the data user is not satisfied that the personal data to
which the data correction request relates is inaccurate,
incomplete, misleading or not up-to-date;
(d) the data user is not satisfied that the correction which is
the subject of the data correction request is accurate,
complete, not misleading or up-to-date; or
(e) subject to subsection (2), any other data user controls
the processing of the personal data to which the data
correction request relates in such a way as to prohibit
the first-mentioned data user from complying, whether
in whole or in part, with the data correction request.
(2) Paragraph (1)(e) shall not operate so as to excuse the
data user from complying with subsection 35(1) in relation to
the data correction request to any extent that the data user can
comply with that subsection without contravening the prohibition
concerned.
Notification of refusal to comply with data correction
request
37. (1) Where a data user who pursuant to section 36 refuses
to comply with a data correction request under section 34, he
shall, not later than twenty-one days from the date of receipt
of the data correction request, by notice in writing, inform the
requestor—
(a) of the refusal and the reasons for the refusal; and
(b) where paragraph 36(1)(e) is applicable, of the name and
address of the other data user concerned.