Personal Data Act (1998:204);
issued 29 April 1998.
Be it enacted as follows.
General provisions
Purpose of this Act
Section 1
The purpose of this Act is to protect people against the violation of their personal integrity by
processing of personal data.
Deviating provisions in another enactment
Section 2
If another statute or other enactment contains provisions that deviate from this Act, those
provisions shall apply.
Definitions
Section 3
In this Act the following terms are used with the meaning stated below.
Term
Meaning
Processing (of personal data)
Any operation or set of operations which is taken as
regards personal data, whether or not it occurs by
automatic means, for example collection, recording,
organisation, storage, adaptation or alteration,
retrieval, gathering, use, disclosure by transmission,
dissemination or otherwise making information
available, alignment or combination, blocking,
erasure or destruction.
Blocking (of personal data)
An operation that is taken in order that personal data
shall be linked with information that they are
restricted and about the reasons for the restriction and
in order that personal data should not be provided to
a third party except under the provisions of Chapter 2
of the Freedom of the Press Act.
Recipient
A person to whom personal data is provided.
However, when personal data is provided in order
that an authority should be able to perform such
supervision, control or audit that it is under a duty to
attend to, the authority shall not be regarded as a
recipient.
Personal data
All kinds of information that directly or indirectly
may be referable to a natural person who is alive.