Personal Data (Privacy) Ordinance Part 5—Division 1 5-14 Section 20 Cap. 486 request— (a) if the data user is not supplied with such information as the data user may reasonably require— (i) in order to satisfy the data user as to the identity of the requestor; (ii) where the requestor purports to be a relevant person, in order to satisfy the data user— (A) as to the identity of the individual in relation to whom the requestor purports to be such a person; and (B) that the requestor is such a person in relation to that individual; (b) subject to subsection (2), if the data user cannot comply with the request without disclosing personal data of which any other individual is the data subject unless the data user is satisfied that the other individual has consented to the disclosure of the data to the requestor; or (c) in any other case, if compliance with the request is for the time being prohibited under this or any other Ordinance. (Amended 18 of 2012 s. 13) (2) Subsection (1)(b) shall not operate— (a) so that the reference in that subsection to personal data of which any other individual is the data subject includes a reference to information identifying that individual as the source of the personal data to which the data access request concerned relates unless that information names or otherwise explicitly identifies that individual; (b) so as to excuse a data user from complying with the data access request concerned to the extent that the request may be complied with without disclosing the identity of Verified Copy Last updated date 20.4.2018