Exam CIPP-A topic 1 question 1 discussion

D. Unreasonable expense.

24. Such access and opportunity for correction should be provided except where: (i) the burden or expense of doing so would be unreasonable or disproportionate to the risks to the individual's privacy in the case in question; Commentary - in some situations, it may be necessary for organizations to deny claims for access and correction, and this Principle sets out the conditions that must be met in order for such denials to be considered acceptable, which include: situations where claims would constitute an unreasonable expense or burden on the personal information controller, SUCH AS WHEN claims for access are repetitious or vexatious by nature; cases where providing the information would constitute a violation of laws or would compromise security...

Agree with D. Section 24 of APEC Framework

D. Unreasonable expense. The APEC Privacy Framework's Access and Correction principle allows for exceptions when providing access to personal information or making corrections would impose an unreasonable burden or expense on the organization. In such cases, organizations may deny or limit access or correction, provided they can justify the decision as necessary and reasonable.