THE PERSONAL DATA PROTECTION BILL, 2018
CHAPTER I
PRELIMINARY
1. Short title, extent and commencement.— ................................................................................ 1
2. Application of the Act to processing of personal data.— ........................................................ 1
3. Definitions.— In this Act, unless the context otherwise requires, — ...................................... 2
CHAPTER II
DATA PROTECTION OBLIGATIONS
4. Fair and reasonable processing.— ........................................................................................... 6
5. Purpose limitation.— ............................................................................................................... 6
6. Collection limitation. —. ......................................................................................................... 7
7. Lawful processing.— ............................................................................................................... 7
8. Notice.— .................................................................................................................................. 7
9. Data quality.— ......................................................................................................................... 8
10. Data storage limitation.— ...................................................................................................... 8
11. Accountability.— ................................................................................................................... 9
CHAPTER III
GROUNDS FOR PROCESSING OF PERSONAL DATA
12. Processing of personal data on the basis of consent.—.......................................................... 9
13. Processing of personal data for functions of the State. — ................................................... 10
14. Processing of personal data in compliance with law or any order of any court or tribunal. —
10
15. Processing of personal data necessary for prompt action. — .............................................. 10
16. Processing of personal data necessary for purposes related to employment. —.................. 10
17. Processing of data for reasonable purposes. —.................................................................... 11
CHAPTER IV
GROUNDS FOR PROCESSING OF SENSITIVE PERSONAL DATA
18. Processing of sensitive personal data based on explicit consent. — .................................... 11
19. Processing of sensitive personal data for certain functions of the State. — ........................ 12
20. Processing of sensitive personal data in compliance with law or any order of any court or
tribunal. — ........................................................................................................................... 12
21. Processing of certain categories of sensitive personal data for prompt action. —............... 12
i