12. Access Principle
Feedback & supportIn plain English
A data subject must be given access to their personal data held by a data user. They must be able to correct it if it is inaccurate, incomplete, misleading or out of date. The exception is where a request for access or correction is refused under the Act.
Summary · Drafted with AI, checked against the official text on 30 Sep 2026.
A data subject shall be given access to his personal data held by a data controller and be able to correct that personal data where the personal data is inaccurate, incomplete, misleading or not up-to-date, except where compliance with a request to such access or correction is refused under this Act.
data subject
“data subject” means an individual who is the subject of the personal data;
Personal Data Protection 23
personal data
“personal data” means any information in respect of commercial transactions, which— (a) is being processed wholly or partly by means of equipment operating automatically in response to instructions given for that purpose; (b) is recorded with the intention that it should wholly or partly be processed by means of such equipment; or (c) is recorded as part of a relevant filing system or with the intention that it should form part of a relevant filing system, that relates directly or indirectly to a data subject, who is identified or identifiable from that information or from that and other information in the possession of a data user, including any sensitive personal data and expression of opinion about the data subject; but does not include any information that is processed for the purpose of a credit reporting business carried on by a credit reporting agency under the Credit Reporting Agencies Act 2010;
Division 1a
Accountability of personal data
Appointment of data protection officer 12a. (1) A data controller shall appoint one or more data protection officers who shall be accountable to the data controller for the compliance with this Act.
this Act
“this Act” includes regulations, orders, notifications and other subsidiary legislation made under this Act;