6 No. 37067 GOVERNMENT GAZETTE, 26 November 2013 Act No. 4 of 2013 Protection of Personal Information Act, 2013 6 Condition 6 Openness 17. 18. Documentation Notification to data subject when collecting personal information Condition 7 5 Security safeguards 19. 20. 21. 22. Security measures on integrity and confidentiality of personal information Information processed by operator or person acting under authority Security measures regarding information processed by operator Notification of security compromises 10 Condition 8 Data subject participation 23. 24. 25. Access to personal information Correction of personal information Manner of access 15 Part B Processing of special personal information 26. 27. 28. 29. 30. 31. 32. 33. Prohibition on processing of special personal information General authorisation concerning special personal information 20 Authorisation concerning data subject’s religious or philosophical beliefs Authorisation concerning data subject’s race or ethnic origin Authorisation concerning data subject’s trade union membership Authorisation concerning data subject’s political persuasion Authorisation concerning data subject’s health or sex life Authorisation concerning data subject’s criminal behaviour or biometric 25 information Part C Processing of personal information of children 34. 35. Prohibition on processing personal information of children General authorisation concerning personal information of children 30 CHAPTER 4 EXEMPTION FROM CONDITIONS FOR PROCESSING OF PERSONAL INFORMATION 36. 37. 38. General Regulator may exempt processing of personal information Exemption in respect of certain functions 35 CHAPTER 5 SUPERVISION Part A Information Regulator 39. 40. Establishment of Information Regulator Powers, duties and functions of Regulator 40