Section 63 — Privacy Act 2020: Decision on request to correct personal information

63 Decision on request to correct personal information (1) As soon as is reasonably practicable after receiving a request under IPP 7(1),

and in any case not later than 20 working days after receiving the request, an agency must— (a) decide whether to grant the request; and (b) notify the requestor that— (i) the agency has corrected, or will correct, the personal information; or (ii) the agency will not correct the personal information. (2) A notice under subsection (1)(b)(i) must inform the requestor of the action the agency has taken, or will take, to correct the information. (3) A notice under subsection (1)(b)(ii) must inform the requestor of— (a) the reason for the agency’s refusal to correct the information; and (b) the requestor’s entitlement to provide a statement of the correction sought and to request that it be attached to the information (if the requestor has not done so already); and (c) the requestor’s right to make a complaint to the Commissioner in respect of the agency’s refusal to correct the information. Compare: 1993 No 28 ss 6 (IPP 7(2)) , 40(1)