Back

File privacy rights violation complaints inside the mandate stipulated from the refusal.


CONTROL ID
00479
CONTROL TYPE
Behavior
CLASSIFICATION
Corrective

SUPPORTING AND SUPPORTED CONTROLS




This Control directly supports the implied Control(s):
  • Implement procedures to file privacy rights violation complaints., CC ID: 00476

There are no implementation support Controls.


SELECTED AUTHORITY DOCUMENTS COMPLIED WITH




  • A decision on the ownership of personal data must be made within 6 months. (Art 18.3, ORGANIC LAW 15/1999 of 13 December on the Protection of Personal Data)
  • An individual refused access to his/her personal information may, after filing a complaint with the Privacy Commissioner, apply to the Court for a review within 45 days after the results of an investigation of the complaint by the Privacy Commissioner are received by the complainant or within the ti… (§ 41, § 42, Canada Privacy Act, P-21)
  • Complaints that result from a refusal to grant a request under Section 8 must be filed within 6 months, or a longer period as allowed by the Privacy Commissioner, after the request is refused or after the expiration of the time limit for responding to the request. (§ 11(3), Canada Personal Information Protection Electronic Documents Act (PIPEDA), 2000, c.5)
  • Applications for review must be lodged within 15 working days from the date the notification of the contested administrative decision takes effect. (Art 85, Tlaxcala Law on Access to Public Information and Personal Data Protection)
  • A complaint must be filed within 180 days of when the complainant knew or should have known that the act or omission complained of occurred, unless this time limit is waived by the Secretary for good cause shown. (§ 160.306(b)(3), 45 CFR Part 160 - General Administrative Requirements)