TongaCivil Registration and Digital Identification Act 2025, rights of individuals over personal information
A data subject rights rule binding government bodies.
- Instrument type
- an act of a legislature
- Obligation class
- Data subject rights
- Audit expectation
- none
What it requires
- If you are the Registrar General, on an individual's request give them, without constraint or unreasonable delay, confirmation of whether you process personal information about them and its nature, a copy of it, deletion of any you are not authorised to retain, and detail of what personal information from the Digital Identification Database you provided, when, to whom and for what purpose (s. 58).
- Correct an error in the Civil Register and Digital Identification Database when a person with an interest writes to you or a sub-registrar and provides evidence of the correct information (s. 59).
- Resolve a complaint within 30 days after the complainant has submitted the necessary information, and review and reconsider any action or inaction of the Registrar General or a sub-registrar within 60 days after an affected individual requests it (ss. 60-61).
These lines are LexLint's reading of the law's text.
Who enforces it
Settledness
- As of
- Open questions
- Has Part III of the Civil Registration and Digital Identification Act 2025, the digital identification part, been proclaimed in force, given that section 1(2) defers it to a date Cabinet proclaims and the Attorney General's legislation listing records as the date the Act commenced?
What record it asks for
Logging duty
Sections 58 to 61 give an individual rights to confirmation, a copy, deletion, a statement of disclosures made from the Digital Identification Database, correction, a complaint answered within 30 days and a review decided within 60 days. They require no log of requests and name no audit. The separate duty in section 46(6) to record each request for information made to the Digital Identification Database is not in this row.
- Kind
- None
- As of
What this law does
Section 58 gives an individual the right to obtain from the Registrar General, without constraint or unreasonable delay, confirmation of whether the Registrar General is processing personal information about them, a copy of it, deletion of any the Registrar General is not authorised to retain, and detailed information on what personal information from the Digital Identification Database was provided, when, to whom and for what purpose.
Section 59 lets a person with an interest write to the Registrar General or a sub-registrar to request correction of an error in the Civil Register and Digital Identification Database, with evidence of the correct information. Section 60 requires the Registrar General to resolve complaints within 30 days, and section 61 lets an affected individual request a review that the Registrar General must complete within 60 days.
The Attorney General's legislation listing records as the date the Act commenced, while section 1(2) defers Part III, the digital identification part, to a date proclaimed by Cabinet.
When LexLint raises it
When your app profile says your app processes personal data.
Back to the example · Lint your app
Page updated .