Operates a social platform, in Timor-Leste

Section 38(1) (access), Constitution of Timor-Leste (2002) · Read the law's page

• Give a Timor-Leste citizen who asks it access to the personal data you hold about them, whether it sits in a computer system or in mechanical or manual records.
• Tell that citizen the purpose of the data you hold about them when they demand it.
• Include a voiceprint or faceprint your service creates in what you disclose, since no statute narrows what counts as personal data for this right.
• Expect no statutory response deadline, fee cap or appeal route, and no supervisory authority: the right is constitutional and its procedure is unlegislated.

Section 38(3) (sensitive categories), Constitution of Timor-Leste (2002) · Read the law's page

• Obtain the person's consent before processing data on their private life, political or philosophical convictions, religious faith, party or trade union membership, or ethnical origin.
• Do not rely on a legitimate-interest, contract or public-task basis for those categories: the Constitution prohibits processing them without consent and states no alternative.
• Do not treat biometric, genetic or health data as covered by this bar, since Section 38(3) does not name them; a voiceprint or faceprint is reached by the Section 38(1) access right instead.