Authority to Investigate Complaints

Section 31 of the Personal Data Protection and Privacy Act (2019) provides for any data subject or any person who believes that a data collector, data processor or data controller is infringing upon their rights or is violation of this Act may make a compliant to the Office.

Section 32 empowers the Office to investigate every compliant made under this Act and may direct a data collector, data processor or data controller to remedy any breach or take such action as the Office may specify to restore the integrity of data collected, processed or held by the data collector, data processor or data controller or the rights of the data subject.