Personal Data Protection Act 2010 · Updated to 15 Sep 2026 · Part VII · Appeal Tribunal
93. Appeal to Appeal Tribunal
Feedback & supportAny person who is aggrieved by the decision of the
Commissioner under this Act relating to matters, including—
Commissioner
“Commissioner” means the Personal Data Protection Commissioner appointed under section 47;
the registration of a data controller under Division 2 of
Part II;
the refusal of the Commissioner to register a code of practice under subsection 23(5);
the failure of the data controller to comply with a data access request or data correction request under
Division 4 of Part II;
Personal Data Protection 69
the issuance of an enforcement notice under section 108;
the refusal of the Commissioner to vary or revoke an enforcement notice under section 109; and
the refusal of the Commissioner to carry out or continue an investigation initiated by a complaint under Part VIII, may appeal to the Appeal Tribunal by filing a notice of appeal with the Appeal Tribunal.
The notice of appeal shall be made in writing to the Appeal
Tribunal within thirty days from the date of the decision of the
Commissioner, or in the case of an enforcement notice, within thirty days after the enforcement notice is served upon the relevant data controller, and the appellant shall serve a copy of the notice of appeal upon the Commissioner.
The notice of appeal shall state briefly the substance of the decision of the Commissioner against which an appeal is filed with the Appeal Tribunal, contain an address at which any notice or document connected with the appeal may be served upon the appellant or his advocate, and shall be signed by the appellant or his advocate.