Personal Data Protection 35 request under subsection (1) which relates to the personal data, the first-mentioned data user shall be deemed to be the data user to whom such a request may be made and the provisions of this Act shall be construed accordingly. Compliance with data correction request 35. (1) Subject to subsections (2), (3) and (5) and section 36, where a data user is satisfied that the personal data to which a data correction request relates is inaccurate, incomplete, misleading or not up-to-date, he shall, not later than twenty-one days from the date of receipt of the data correction request— (a) make the necessary correction to the personal data; (b) supply the requestor with a copy of the personal data as corrected; and (c) subject to subsection (4), where— (i) the personal data has been disclosed to a third party during the twelve months immediately preceding the day on which the correction is made; and (ii) the data user has no reason to believe that the third party has ceased using the personal data for the purpose, including any directly related purpose, for which the personal data was disclosed to the third party, take all practicable steps to supply the third party with a copy of the personal data as so corrected accompanied by a notice in writing stating the reasons for the correction. (2) A data user who is unable to comply with a data correction request within the period specified in subsection (1) shall before the expiration of that period— (a) by notice in writing inform the requestor that he is unable to comply with the data correction request within such period and the reasons why he is unable to do so; and (b) comply with the data correction request to the extent that he is able to do so.