If you are seeking access on behalf of a third party, ensure that you have a letter of authorisation. Please submit a scanned copy of the letter in the attachment field.

Organisations are required to respond within 30 calendar days after receiving request for access to personal data and we will only review your complaint if the organisation fails to respond after this period has lapsed.

Organisations may reject requests for access to individuals’ personal data, subject to exceptions under the PDPA. 

If there are no valid reasons for the organisation to reject your request, please proceed to request for an access review.