Providing means for exercise of privacy rights

Every business organisation engaged in data processing activities must have a process in place that enables data subjects to exercise their privacy rights. Some of these privacy rights include

  • Right to request for information held of them by the organisation
  • Right to demand correction of their personal information where the information held by the business is erroneous
  • Right to demand deletion of their personal information subject to other overriding rights of the business
  • Right to demand restriction of processing of their personal information.

These obligations imposes a duty for organisations to designate an officer who is responsible for responding to enquiries from the public. 

Scroll to Top