Section 31
Compliance with data access request
of Personal Data Protection Act 2010
Subject to subsection (2) and section 32, a data user shall comply with a data access request under section 30 not later than twenty-one days from the date of receipt of the data access request.
(2)
A data user who is unable to comply with a data access request within the period specified in subsection (1) shall before the expiration of that period—
(a)
by notice in writing inform the requestor that he is unable to comply with the data access request within such period and the reasons why he is unable to do so; and
(b)
comply with the data access request to the extent that he is able to do so.
Act 709
(3)
Notwithstanding subsection (2), the data user shall comply in whole with the data access request not later than fourteen days after the expiration of the period stipulated in subsection (1).