Slide 10 of 22
Notes:
Request in writing whether personal data is being kept. If so, must receive description and purpose 21 days.
Examine the data being held. A fee may be charged. Data controller must be sure of identity before giving access as could breach the principles. Dangers of ‘Social Engineering’.
If corrections made, data controller must notify of disclosures of incorrect information. Any identifiable loss could be reclaimed by suing. If modified by intrusion, added complication of perhaps not taking adequate security measures.
