Data Protection Act, 2011, rights of access and correction

Act 13 of 2011, ss. 52-59 and 75-85 (rights of access and correction)

A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.

What follows is LexLint's own research summary of this law, not legal advice.

Commencement not set.

A data subject rights rule binding public and private bodies.

As of 19 September 2026.

What it requires

Part III's and Part IV's access and correction rights (sections 52 to 59 and 75 to 85) are enacted but have not been proclaimed; a public body or an organisation currently owes no statutory duty under this Act to answer an access or correction request.
Once Part III is in force, respond to an individual's access request within thirty days, either giving the personal information, or a written refusal stating the specific ground and the right of appeal to the Commissioner.
Once Part III is in force, on a correction request either correct the personal information or annotate it with the requested correction, and notify any other public body or third party the information was disclosed to in the year before the request.
Once Part IV is in force, respond to an individual's access request against your organisation the same way a public body must under Part III, and follow whatever access, correction, and complaint procedure your mandatory code of conduct states.

What it reaches

Obligation class

Data subject rights, Disclosure

What this law does

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.

Part III, sections 52 to 59, would give every individual in Trinidad and Tobago a right of access to personal information about them held in a public body's personal information bank or otherwise under its custody or control, require the Head of a Public Body to respond within thirty days, and let an individual appeal a refusal to the Commissioner within six weeks.

Section 53 would let the Head of a Public Body refuse access where disclosure would invade another individual's privacy, reveal information supplied in confidence, reveal a confidential source of evaluative material, or fall within a Freedom of Information Act exemption, and section 68 would put the burden of proving an exemption applies on the public body.

Section 57 would give an individual a right to request correction of an error or omission, require the Head of a Public Body to annotate an unactioned correction request, and require notice of a correction to any other public body or third party the information was disclosed to in the year before the request.

Part IV, sections 75 to 85, would give the equivalent access right against an organisation subject to a mandatory code of conduct, with the same Commissioner review and complaint process, but no equivalent correction right of its own; an organisation covered by a mandatory code would instead comply with the code's own provisions.

None of Part III or Part IV is shown as commenced: section 1(2) brought only Part I and specified sections of Part II into force on 6 January 2012, so an individual currently has no statutory access or correction right against either a public body or a private organisation under this Act.

When LexLint raises it

crawls_web
trains_models
deploys_chatbot
automated_outreach
high_risk_decisions

Read the law

Consolidated text of the Data Protection Act
Chap. 22:04, Ministry of the Attorney General and Legal Affairs, mirrored by the Trinidad and Tobago Cyber Security Incident Response Team

Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.

Back to the example · Lint your app