TABLE OF CONTENTS
1
Short title, extent and commencement. ................................................................................... 4
2
Definitions. .............................................................................................................................. 4
3
Scope and applicability. ........................................................................................................... 5
4
Protection of personal data ...................................................................................................... 6
5
General requirements for personal data collection and processing ......................................... 6
6
Notice to the data subject......................................................................................................... 6
7
Non-disclosure of personal data .............................................................................................. 7
8
Security requirements .............................................................................................................. 8
9
Data Retention requirements.- ................................................................................................. 8
10
Data integrity and access to data.- ....................................................................................... 8
11
Record to be kept by data controller .................................................................................... 9
12
transfer of personal data.- .................................................................................................... 9
13
Personal data breach notification._ ...................................................................................... 9
14
Cross border transfer of Personal Data .............................................................................. 10
15
Framework on Conditions for Cross-Border Transfer of Personal Data. — ..................... 10
16
Right of access to personal data ......................................................................................... 10
17
Compliance with data access request ................................................................................. 11
18
Circumstances where data controller may refuse to comply with data access request ...... 11
19
Right to correct personal data ............................................................................................ 12
20
Compliance with data correction request ........................................................................... 13
21
Circumstances where data controller may refuse to comply with data correction request.14
22
Notification of refusal to comply with data correction request ......................................... 14
23
Withdrawal of consent to process personal data.- ............................................................. 15
24
Extent of disclosure of personal data ................................................................................. 15
25
Right to prevent processing likely to cause damage or distress......................................... 16
26
Rights of foreign data subjects ........................................................................................... 17
27
Right to erasure .................................................................................................................. 17
28
Processing of sensitive personal data ................................................................................. 18
29
Repeated collection of personal data in same circumstanceS ............................................ 19
30
Exemption .......................................................................................................................... 19
31
Power to make further exemptions.- .................................................................................. 20
1