Access by Data Subjects

(1) Public Inquiry. Where an individual has reason to believe that personal data relating to him are held, the individual may request, in writing, that the State Auditor or his designee locate all personal data held by the Department of the State Auditor. (2) Request of Individual for Notification of Holding. The Department will inform any individual in writing, within 20 days of receipt of a request, whether the Department maintains any personal data concerning such individual. (3) Right of Data Subject to Access. Unless access by a data subject is prohibited by statute, the Department will, as promptly as possible, but in any event within 20 days of a receipt of a request, grant access to any data subject to any personal data concerning him which the Department holds. In addition, such data subject shall have the right to inspect and copy any personal data to which he has access. (4) NotificationofDenial of Access to Data. The Department will, within 20 days of a receipt of a request, notify an individual in writing, in terms comprehensible to him, of its denial of his request for access, and the reasons therefore.