Personal Data (Privacy) Ordinance T-10 Cap. 486 Section Page Division 3—Provision of Personal Data for Use in Direct Marketing 35I. Application 6A-18 35J. Data user to take specified action before providing personal data 6A-18 35K. Data user must not provide personal data for use in direct marketing without data subject’s consent 6A-22 35L. Data subject may require data user to cease to provide personal data for use in direct marketing 6A-24 35M. Prescribed consent for providing personal data for use in direct marketing under data protection principle 3 6A-26 Part 7 Inspections, Complaints and Investigations 36. Inspections of personal data systems 7-2 37. Complaints 7-2 38. Investigations by Commissioner 7-4 39. Restrictions on investigations initiated by complaints 7-6 40. Commissioner may carry out or continue investigation initiated by complaint notwithstanding withdrawal of complaint 7-12 41. Commissioner to inform relevant data user of inspection or investigation 7-12 Last updated date 20.4.2018