Privacy Regulations — 11
11 (1) Where an individual who is given access under paragraph 12(1)(a) of the Act to personal information that has been used, is being used or is available for use for an administrative purpose believes there is an error or omission in the personal information, the individual may forward to the appropriate officer a Correction Request Form in respect of each personal information bank containing the information (a) requesting correction of the personal information; (b) requesting that any person or body to whom the personal information has been disclosed within the two years immediately preceding the date that the request for correction is received be notified of any correction made pursuant to paragraph (a); and (c) requesting that any government institution to which the personal information has been disclosed within the two years immediately preceding the date that the request for correction is received be notified of any correction made pursuant to paragraph (a) and to make the correction on every copy of the personal information under its control. (2) Where a correction to personal information is made pursuant to a request by an individual under paragraph (1)(a), the head of the government institution that has control of the personal information shall, within thirty days after the receipt by the appropriate officer of the Correction Request Form forwarded by the individual, (a) notify the individual that the correction has been made; (b) notify any person or body referred to in paragraph (1)(b) that the correction has been made; and (c) notify the appropriate officer of any government institution referred to in paragraph (1)(c) that the correction has been made and that the officer is required to make the correction on every copy of the personal information under the control of the institution. (3) Where the appropriate officer referred to in paragraph (2)(c) receives a notice referred to in that paragraph, the officer shall make the correction required by the notice. (4) Where a request by an individual under paragraph (1)(a) to correct personal information is refused in whole or in part, the head of the government institution that has control of the personal information shall, within thirty days after the receipt by the appropriate officer of the Correction Request Form forwarded by the individual, (a) attach a notation to the personal information reflecting that a correction was requested but was refused in whole or in part; (b) notify the individual that (i) the request for correction has been refused in whole or in part and set out the reasons for the refusal, (ii) the notation under paragraph (a) has been attached to the personal information, and (iii) the individual has the right under the Act to make a complaint to the Privacy Commissioner; (c) notify any person or body referred to in paragraph (1)(b) that the notation under paragraph (a) has been attached to the personal information; and (d) notify the appropriate officer of any government institution referred to in paragraph (1)(c) that the notation under paragraph (a) has been attached to the personal information and that the officer is required to attach such a notation to every copy of the personal information under the control of the institution. (5) Where the appropriate officer referred to in paragraph (4)(d) receives a notice referred to in that paragraph, the officer shall comply with that notice. SOR/85-1092, s. 4