Personal Data (Privacy) Ordinance Part 5—Division 2 5-26 Section 24 Cap. 486 (2) A data user who is unable to comply with subsection (1) in relation to a data correction request within the period specified in that subsection shall— (a) before the expiration of that period— (i) by notice in writing inform the requestor that the data user is so unable and of the reasons why the data user is so unable; and (ii) comply with that subsection to the extent, if any, that the data user is able to comply with that subsection; and (b) as soon as practicable after the expiration of that period, comply or fully comply, as the case may be, with that subsection. (3) A data user is not required to comply with subsection (1)(c) in any case where the disclosure concerned of the personal data to the third party consists of the third party’s inspection of a register or other like document— (a) in which the data is entered or otherwise recorded; and (b) which is available for inspection by the public, but this subsection shall not apply if the third party has been supplied with a copy, certified by or under the authority of the data user to be correct, of the data. (Amended 18 of 2012 s. 2) 24. Circumstances in which data user shall or may refuse to comply with data correction request (1) Subject to subsection (2), a data user shall refuse to comply with section 23(1) in relation to a data correction request if the data user is not supplied with such information as the data user may reasonably require— Verified Copy Last updated date 20.4.2018