212 (5)Thedatacontrollershallnotifyadalasubject,whohasmadea of the lequest within a peliod request in terms of subsection (1), of the outcome of 14 days of the making of the request' Data controller to give effect to principles under this Act The data controllet shall ensure that the principles set out are complied with' and all the measures that give effect to the principles 28. prohibition on processing of sensitive personal information sha1I not Unless specifically permitted under this Act, a data controlier process personal information concerning a - 29. (a) (b) child who is subject to parental control in terms of the 1aw; or data subject's spiritual, religiotts or philosopliical beliefs' race or ethnic origin, trade union membership, political affiliation, health, sexual life or criminal behaviour' PART IV _ EXEMPTIONS FROM PROTECTION ON PROCES SING OF PERSONAL INFORMATION beliefs Exemption on data subject's spiritual, religious or philosophical 30.(1)Theprohibitiononprocessingpersonaiinfor.mationofdatasubif the processspiritual, religious or philosophical beliefs sha1l not apply i"ct,s ing is carried out bY (a) spiritual ol religious organisations, or independent sections of those organisations: Pr.ovidedthattheinformationconcel.nsdatasubjectsbelonging to those organisations; (b) institutions founded on spiritual, religious or philosophical principles with respect to their members or employit is ees or other persons belonging to the institution, if necessary to achieve their airns and plinciples; or'