Privacy Act 1988 (Australia) AUPRV-5: APP 12-13 Access and Correction of Personal Information
Per APPs 12-13: access + correction. Requirements include (a) implement APP 12 - Access to Personal Information - upon request give access to personal information unless an exception applies + (b) implement APP 13 - Correction of Personal Information - upon request correct personal information that is inaccurate + out-of-date + incomplete + irrelevant + misleading + (c) maintain mechanism for receiving + verifying + responding to access + correction requests within statutory timelines + (d) handle refusals consistent with the Act + provide written notice of reasons + (e) maintain records of requests + responses + (f) integrate with complaint handling.
Maintained by Gerard Blokdyk·Verified against the published standard ·Control text last updated
What else in your programme already covers this
This control maps to 45 controls across 40 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
HITECH-Scope-ARRA-XIII-42USC-Ch156-Subtitles HITECH Act Statutory Scope, ARRA Title XIII Origin and 42 USC Chapter 156 Structure (Subtitles A through D)
HITECH-SubtitleA-ONC-HIT-Standards-EHR-MU-PI HITECH Subtitle A - ONC, HIT Standards Committee, EHR Certification, Meaningful Use / Promoting Interoperability
LGPD-BR-Data-Subject-Rights-Article-18-Confirmation-Access-Correction-Anonymization-Portability-Revoke-Sharing Brazil LGPD Data Subject Rights + Article 18 + 9 Rights + Confirmation + Anonymization
DOM172-Data-Subject-ARCO-Rights-Habeas-Data-Action-Constitutional-Article-70-Access-Rectification-Cancellation-Opposition Dominican Republic Law 172-13 ARCO Rights + Habeas Data Action + Constitutional Article 70