Personal Data (Privacy) Ordinance Part 5—Division 2 5-30 Section 25 Cap. 486 (4) Subsection (3)(e) shall not operate so as to excuse a data user from complying with section 23(1) in relation to the data correction request concerned to the extent that the data user can comply with that section without contravening the prohibition concerned. 25. Notification of refusal to comply with data correction request, etc. (1) A data user who pursuant to section 24 refuses to comply with section 23(1) in relation to a data correction request shall, as soon as practicable but, in any case, not later than 40 days after receiving the request, by notice in writing inform the requestor— (a) of the refusal and the reasons for the refusal; and (b) where section 24(3)(e) is applicable, of the name and address of the other data user concerned. (2) Without prejudice to the generality of subsection (1), where— (a) the personal data to which a data correction request relates is an expression of opinion; and (Amended 18 of 2012 s. 2) (b) the data user concerned is not satisfied that the opinion is inaccurate, then the data user shall— (i) make a note, whether annexed to that data or elsewhere— (A) of the matters in respect of which the opinion is considered by the requestor to be inaccurate; and (B) in such a way that that data cannot be used by a person (including the data user and a third party) without the note being drawn to the attention of, Verified Copy Last updated date 20.4.2018