(e)
(f)
(g)
(h)
quality of information,
openness,
data security safeguards, and
data subject participation.
Processing of personal data
18. (1) A person who processes personal data shall ensure that the
personal data is processed
(a) without infringing the privacy rights of the data subject;
(b) in a lawful manner; and
(c) in a reasonable manner.
(2) A data controller or processor shall in respect of foreign data
subjects ensure that personal data is processed in compliance with data
protection legislation of the foreign jurisdiction of that subject where
personal data originating from that jurisdiction is sent to this country for
processing.
Minimality
19. Personal data may only be processed if the purpose for which it is to be
processed, is necessary, relevant and not excessive.
Consent, justification and objection
20. (1) A person shall not process personal data without the prior con- sent of
the data subject unless the purpose for which the personal data is processed is
(a) necessary for the purpose of a contract to which the data subject
is a party;
(b) authorised or required by law;
(c) to protect a legitimate interest of the data subject;
(d) necessary for the proper performance of a statutory duty;
or
(e) necessary to pursue the legitimate interest of the data con- troller
or a third party to whom the data is supplied.
(2) Unless otherwise provided by law, a data subject may object to the
processing of personal data.
(3) Where a data subject objects to the processing of personal data, the
person who processes the personal data shall stop the processing of the personal
data.
Collection of personal data
21. (1) A person shall collect personal data directly from the data subject.
(2) Despite subsection (1), personal data may be collected indirectly where:
(a) the data is contained in a public record;
(b) the data subject has deliberately made the data public;
(c) the data subject has consented to the collection of the
information from another source;
(d) the collection of the data from another source is not likely to