Personal Data (Privacy) (Amendment) Ordinance 2012

Amendments to the Personal Data (Privacy) Ordinance include:

Data Access Requests (effective 1 October 2012)

• The Amendment Ordinance provides for the refusal of a data access request based on the non-disclosure or secrecy requirements in other ordinances.
• As regards the handling of data access requests made to the Police in respect of criminal conviction records, if the requestor has a clear record, the Police is not required to comply with the request in writing, though it is still required to make a verbal response within 40 days.