Personal Data (Privacy) Ordinance Part 5—Division 3 5-34 Section 27 27. Cap. 486 Log book to be kept by data user (1) A data user shall keep and maintain a log book— (a) for the purposes of this Part; (b) in the Chinese or English language; and (c) such that any particulars entered in the log book pursuant to this section are not erased therefrom before the expiration of— (i) subject to subparagraph (ii), 4 years after the day on which they were so entered; (ii) such longer or shorter period as may be prescribed, either generally or in any particular case, by regulations made under section 70. (2) A data user shall in accordance with subsection (3) enter in the log book— (a) where pursuant to section 20 the data user refuses to comply with a data access request, particulars of the reasons for the refusal; (b) where pursuant to section 21(2) the data user does not comply with section 21(1), particulars of the prejudice that would be caused to the interest protected by the exemption concerned under Part 8 if the existence or non-existence of the personal data to which the data access request concerned relates was disclosed; (Amended 18 of 2012 s. 2) (c) where pursuant to section 24 the data user refuses to comply with section 23(1) in relation to a data correction request, particulars of the reasons for the refusal; (d) any other particulars required by regulations made under section 70 to be entered in the log book. Verified Copy Last updated date 20.4.2018