Section 35
Power to review
of Personal Data Protection Order, 2025
(1)
On the application of a complainant, the Authority may review-
{a) a refusal by an organisation to provide access to personal data or other information requested by the complainant under section 18, or the organisation's failure to provide that access within a reasonable time;
(b)
a refusal by an organisation to correct personal data in accordance with a request by the complainant under section 19, or the organisation's failure to make the correction within a reasonable time; or
(c)
a fee required from the complainant by an organisation in relation to a request by the complainant under section 18 or 19.
(2)
On completion of its review under subsection (1), the Authority may-
(a)
confirm the refusal to provide access to the personal data or other information, or direct the organisation to provide access to the personal data or other information within the time specified by the Authority;
(b)
confirm the refusal to correct the personal data, or direct the organisation to correct the personal data in the manner and within the time specified by the Authority; or 38
{c) confirm, reduce or disallow a fee, or direct the organisation to make a refund to the complainant.