We may take reasonable steps to verify your identity before granting access or permitting corrections to your Personal Data. We will endeavour to respond within 30 days of your request in compliance with the Personal Data (Privacy) Ordinance.