The following procedure applies to appeals of denial of initial requests for access to, or correction or deletion of, personal data under the Policy on Personal Data Privacy (PPDP) of the Asian Infrastructure Investment Bank (“AIIB” or “Bank”).
- A Data Subject (or their duly authorized representative), whose initial request to access, correct, or delete personal data is denied, may appeal the denial by submitting an Appeal Request Form on AIIB’s website within sixty (60) working days from notice of the denial. Any appeal submitted beyond this period will not be considered. The Data Subject must demonstrate that the initial request was submitted in accordance with the prescribed procedures set forth in [link] and provide a reasonable argument that the Bank has violated the PPDP or related Directive by declining the initial request.
- The Data Subject will be informed of the Bank’s receipt of the appeal no later than five (5) working days following such receipt.
- The appeal will be reviewed by an external data privacy expert (Independent Expert) provided it complies with the aforementioned requirements. The Independent Expert will complete their review and submit to the President of AIIB their written recommendation whether or not to grant the initial request no later than thirty (30) working days after receipt of the appeal.
- The Data Subject will be informed of the President’s decision no later than fifteen (15) working days after receipt of the recommendation from the Independent Expert.
To submit an Appeal Request Form, please click here.