As a data subject, you have the right to obtain confirmation on whether or not data relating to you are being processed, as well as information about any of the following:

  1. Contents of personal information and categories of data that were processed;
  2. Sources from which personal data were obtained, if the data was not collected from the data subject;
  3. Purposes of processing;
  4. Manner by which such data were processed;
  5. Information on automated processes where the processed data will or is likely to be made as the sole basis for any decision that significantly affects or will affect the data subject;
  6. Names and addresses of recipients of the personal information;
  7. Reasons for the disclosure of personal information to recipients;
  8. Date when his or her personal data were last accessed and modified;
  9. Period for which particular categories of information will be stored; and
  10. The designation, name or identity, and address of the PIC’s data protection officer.

Can I request access to the personal data of another individual?

You may request access to your own personal data, but not to the information relating to any other individual. This would likewise exclude any analysis made by the PIC with respect to your personal data, i.e., inferred, derived, modeled, or business-generated data.

In what instances can my right to access my personal data be limited?

Your right to access your personal data may be limited in the following instances:

  • If the information is publicly available.
  • Repeated, identical, or similar requests if such request for access has been previously granted unless a reasonable interval of time from the previous request has elapsed.
  • If the request for access will entail a disproportionate amount of effort or resources.
  • If providing access to the information may cause serious harm to your physical, mental, or emotional health.