3
Data Protection Act, 2018 - 5. ...............................................
(d) the alignment, combination, correction, erasure or destruction of personal
data;
“public body” includes–
(a) Parliament or any committee of Parliament;
(b) the Cabinet as constituted under the Constitution;
(c) a ministry, a department or a division of the ministry or a constituency
office of a minister, wherever located;
(d) a local authority;
(e) a public statutory corporation or body;
(f) a body corporate or an incorporated public body established for a public
purpose, which is owned or controlled by the State;
(g) an embassy, consulate or mission of the Saint Christopher and
Nevis or an office of the Saint Christopher and Nevis situate outside
Saint Christopher and Nevis whose functions include the provision of
diplomatic or consular services for or on behalf of Saint Christopher and
Nevis;
(h) any other body designated by the Minister by Regulations made under
this Act, to be a public body for the purposes of this Act.
“sensitive personal data” means any personal data consisting of information as to
the physical or mental health or condition of a data subject, his or her sexual
orientation, his or her political opinions, his or her religious beliefs or other
beliefs of a similar nature, the commission or alleged commission by him or
her of any offence or any other personal data as the Minister may determine
by order published in the Gazette.
3.
Objects of Act.
The objects of this Act are to safeguard personal data processed by public bodies and
private bodies in an era in which technology increasingly facilitates the processing of personal
data by balancing the necessity of –
(a) processing personal data by public bodies and private bodies; and
(b) safeguarding personal data from unlawful processing by public bodies and
private bodies;
to promote transparency and accountability in the processing of personal data.
4.
Application of Act.
(1) With respect to a private body this Act applies to a person who processes or who
has control over or authorises the processing of any personal data in respect of commercial
transactions.
(2) Subject to subsection (1), this Act applies to a person in respect of personal data
if–