No. 33
Electronic Transactions
(d) accurate and, where necessary, kept up to date;
(e) every reasonable step shall be taken to ensure that data
which is inaccurate or incomplete, having regard to the purposes
for which they were collected or for which they are further
processed, is erased or rectified; and
(f) kept in a form which permits identification of data subjects
for no longer than is necessary for the purposes for which the data
was collected or for which it is further processed.
(2) Personal data may be processed only if__
43
(a) the data subject has unambiguously given his consent;
(b) the processing is necessary for the performance of a
contract to which a data subject is party or in order to take steps
at the request of the data subject prior to entering into a contract;
(c) the processing is necessary for compliance with a legal
obligation to which a data controller is subject;
(d) the processing is necessary in order to protect the vital
interests of a data subject;
(e) the processing is necessary for the performance of a task
carried out in the public interest or in the exercise of official
authority vested in a data controller or in a third party to whom
the data is disclosed; or
(f) the processing is necessary for the purposes of the
legitimate interests pursued by a data controller or by the third
party or parties to whom the data is disclosed, except where such
interests are overridden by the interests for fundamental rights
and freedoms of the data subject.
(3) For purposes of this section, “consent” means any freely given
specific and informed indication by a data subject, of his wishes, by
agreement, to his personal data being collected, processed or stored.
72.__(1) A data subject shall be entitled to obtain from a data
controller, without constraint or unreasonable delay and at no
expense__
(a) confirmation as to whether or not the data relating to him is
being processed;
(b) communication to him of the data undergoing processing
and of their source; and
(c) communication for the purposes of the processing and the
recipients to whom the data is disclosed.
(2) A data subject shall be entitled to object at any time on
legitimate grounds relating to his situation to the processing of data
Rights of a
data subject