[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-0-en-105":3,"doc-seo-488766-105":59,"doc-detail-488766-en":130},{"code":4,"msg":5,"data":6},0,"success",[7,13,18,23,28,33,38,43,48,51,55],{"id":8,"doc_module":4,"doc_module_name":9,"category_name":10,"show_sort_weight":11,"slug":12},1,"Document","Story & Novel",90,"story-novel",{"id":14,"doc_module":4,"doc_module_name":9,"category_name":15,"show_sort_weight":16,"slug":17},2,"Literature",80,"literature",{"id":19,"doc_module":4,"doc_module_name":9,"category_name":20,"show_sort_weight":21,"slug":22},4,"Exam",70,"exam",{"id":24,"doc_module":4,"doc_module_name":9,"category_name":25,"show_sort_weight":26,"slug":27},5,"Comic",60,"comic",{"id":29,"doc_module":4,"doc_module_name":9,"category_name":30,"show_sort_weight":31,"slug":32},6,"Technology",50,"technology",{"id":34,"doc_module":4,"doc_module_name":9,"category_name":35,"show_sort_weight":36,"slug":37},7,"Healthcare",40,"healthcare",{"id":39,"doc_module":4,"doc_module_name":9,"category_name":40,"show_sort_weight":41,"slug":42},8,"Research & Report",30,"research-report",{"id":44,"doc_module":4,"doc_module_name":9,"category_name":45,"show_sort_weight":46,"slug":47},9,"Religion & Spirituality",20,"religion-spirituality",{"id":46,"doc_module":4,"doc_module_name":9,"category_name":49,"show_sort_weight":46,"slug":50},"World Cup","world-cup",{"id":52,"doc_module":4,"doc_module_name":9,"category_name":53,"show_sort_weight":52,"slug":54},10,"Lifestyle","lifestyle",{"id":56,"doc_module":4,"doc_module_name":9,"category_name":57,"show_sort_weight":24,"slug":58},19,"General","general",{"code":4,"msg":60,"data":61},"ok",{"site_id":62,"language":63,"slug":64,"title":65,"keywords":66,"description":67,"schema_data":68,"social_meta":123,"head_meta":125,"extra_data":127,"updated_unix":129},105,"en","personal-data-privacy-ordinance-data-access-request-form-important-notice","Personal Data (Privacy) Ordinance - Data Access Request Form - Important Notice","","Data Access Request Form text lays out how a data subject or relevant person may request access to personal data under the Personal Data (Privacy) Ordinance (PDPO). It explains the form’s legal-reference purpose, language requirements (Chinese or English), eligibility, what information the requester must specify in detail, and limits on access to non-personal or unrelated data. It also details key duties and timelines for data users (notifying within 40 days, supplying copies, refusing with reasons where applicable), plus offences and fee principles.",{"@graph":69,"@context":122},[70,84,105],{"@type":71,"itemListElement":72},"BreadcrumbList",[73,77,79,82],{"item":74,"name":75,"@type":76,"position":8},"https://docshare.wps.com","Home","ListItem",{"item":78,"name":9,"@type":76,"position":14},"https://docshare.wps.com/document/",{"item":80,"name":35,"@type":76,"position":81},"https://docshare.wps.com/document/healthcare/",3,{"item":83,"name":65,"@type":76,"position":19},"https://docshare.wps.com/document/personal-data-privacy-ordinance-data-access-request-form-important-notice/488766/",{"url":83,"name":65,"@type":85,"image":86,"author":91,"headline":65,"publisher":94,"fileFormat":97,"inLanguage":63,"description":67,"dateModified":98,"datePublished":99,"encodingFormat":97,"isAccessibleForFree":100,"interactionStatistic":101},"DigitalDocument",{"url":87,"@type":88,"width":89,"height":90},"https://docshare.wps.com/thumbnails/personal-data-privacy-ordinance-data-access-request-form-important-notice/488766.png","ImageObject",300,407,{"name":92,"@type":93},"Aria","Person",{"url":74,"name":95,"@type":96},"DocShare","Organization","application/pdf","2026-10-29","2026-10-01",true,{"@type":102,"interactionType":103,"userInteractionCount":24},"InteractionCounter",{"@type":104},"ViewAction",{"@type":106,"mainEntity":107},"FAQPage",[108,114,118],{"name":109,"@type":110,"acceptedAnswer":111},"Who is allowed to make a data access request under the PDPO?","Question",{"text":112,"@type":113},"A data access request must be made by the data subject or a relevant person as defined in the PDPO. The form refers to Part III for relevant person details.","Answer",{"name":115,"@type":110,"acceptedAnswer":116},"What must the requester specify in the form?",{"text":117,"@type":113},"The requester must clearly and in detail specify the personal data being requested. The data user may refuse if the information is insufficient to locate the data.",{"name":119,"@type":110,"acceptedAnswer":120},"What are the data user’s main obligations within the 40-day period?",{"text":121,"@type":113},"Within 40 days after receiving the request, the data user must either inform the requestor in writing that they hold the data and supply a copy, or inform the requestor that they do not hold it. If unable within the period, a written notice with reasons is required and compliance should follow as soon as practicable.","https://schema.org",{"og:url":83,"og:type":124,"og:title":65,"og:site_name":95,"og:description":67},"article",{"robots":126,"canonical":83},"index,follow",{"doc_id":128,"site_id":62},488766,1791397987,{"code":4,"msg":5,"data":131},{"doc_id":128,"user_id":132,"nickname":92,"user_avatar":133,"doc_module":4,"category_id":34,"category_name":35,"doc_title":65,"doc_description":67,"doc_content":134,"file_id":135,"file_url":136,"file_type":137,"file_size":138,"view_count":24,"is_deleted":4,"is_public":8,"is_downloadable":8,"audit_status":8,"page_count":34,"language":139,"language_code":63,"site_id":62,"html_lang":63,"table_of_contents":140,"faqs":141,"seo_title":142,"seo_description":67,"update_tm":143,"read_time":144,"preview_page_count":4},2336464648322,"https://ap-avatar.wpscdn.com/avatar/2200025388227c56fec?_k=1778556882303663488","PERSONAL DATA (PRIVACY) ORDINANCE  \nDATA ACCESS REQUEST FORM  \nImportant Notice to Requestor  \n1. Please read this Form and the footnotes carefully before completing this Form. Where this Form contains a summary of the relevant requirements under the Personal Data (Privacy) Ordinance (“the PDPO”), the summary is provided for reference purpose only. For a complete and definitive statement of the law, please refer to the PDPO itself.  \n2. This Form is specified by the Privacy Commissioner for Personal Data (“the Commissioner”) under section 67(1) of the PDPO with effect from 1 October 2012. The data user may refuse to comply with your data access request (“your request”) if it is not made in this Form (see section 20(3)(e) of the PDPO) .  \n3. Please complete this Form in Chinese or English. The data user may refuse to comply with your request if your request is not made in either language (see section 20(3)(a) of the PDPO) .  \n4. To make a data access request, you must either be the data subject or a “relevant person” as defined in section 2 or 17A of the PDPO (please refer to Part III of this Form) .  \n5. You are not entitled to access data which is not personal data or personal data not belonging to you (see section 18(1) of the PDPO) . The data user is only required to provide you with a copy of your personal data rather than a copy of the document containing your personal data. Inmost situations, the data user may elect to provide a copy of the document concerned. If the personal data you request is recorded in an audio form, the data user may provide a transcript of that part of the audio record which contains your personal data.  \n6. It is important that you specify in this Form clearly and in detail the personal data that you request. The data user may refuse to comply with your request if you have not supplied him with such information as he may reasonably require to locate the requested data (see section 20(3)(b) of the PDPO) . If you supply any false or misleading information in this Form for the purpose of having the data user comply with your request, you may commit an offence (see section 18(5) of the PDPO) .  \n7. Do not send this Form to the Commissioner. The completed Form should be sent directly to the data user to whom you make your request.  \n8. The data user may require you to provide identity proof such as your Hong Kong Identity Card and may charge a fee for complying with your request (see sections 20(1)(a) and 28(2) of the PDPO) .  \n9. The data user may refuse to comply with your request in the circumstances specified in section  \n20 of the PDPO.  \nImportant Notice to Data User  \n1. You are required by section 19(1) of the PDPO to comply with a data access request within 40 days after receiving the same. To comply with a data access request means: (a) if you hold the requested data, to inform the requestor in writing that you hold the data and supply a copy of the data; or (b) if you do not hold the requested data, to inform the requestor in writing that you do not hold the data (except that the Hong Kong Police may inform the requestor orally if the request is whether it holds any record of criminal conviction of an individual) . A mere notification given to the requestor to collect the requested data or a note sent to the requestor for payment of a fee is insufficient. In complying with the request, you should omit or otherwise not disclose the names or other identifying particulars of individuals other than the data subject.  \n2. If you are unable to comply with the data access request within the 40-day period, you must inform the requestor by notice in writing that you are so unable and the reasons, and comply with the request to the extent, if any, that you are able to within the same 40-day period, and thereafter comply or fully comply, as the case may be, with the request as soon as practicable (see section 19(2) of the PDPO) .  \n3. If you have a lawful reason for refusing to comply with the request","cbCaihlsgfySFn3q","https://ap.wps.com/l/cbCaihlsgfySFn3q","pdf",251651,"English","# Important Notice to Requestor\n## Important Notice to Data User","[{\"question\":\"Who is allowed to make a data access request under the PDPO?\",\"answer\":\"A data access request must be made by the data subject or a relevant person as defined in the PDPO. The form refers to Part III for relevant person details.\"},{\"question\":\"What must the requester specify in the form?\",\"answer\":\"The requester must clearly and in detail specify the personal data being requested. The data user may refuse if the information is insufficient to locate the data.\"},{\"question\":\"What are the data user’s main obligations within the 40-day period?\",\"answer\":\"Within 40 days after receiving the request, the data user must either inform the requestor in writing that they hold the data and supply a copy, or inform the requestor that they do not hold it. If unable within the period, a written notice with reasons is required and compliance should follow as soon as practicable.\"}]","Personal Data (Privacy) Ordinance - Data Access Request Form - Important Notice | PDF",1790817328,18]