Personal Data Protection Act GN. NO. 395B (Contd) on public interest grounds, or for the institution, trial or defence of legal claims; (e) the transfer is necessary in order to protect the legitimate interests of the data subject; and (f) the transfer is made in accordance with the law, and is intended to provide information to the public, and is open for consultation either by the public in general or by any person who can demonstrate a legitimate interest, to give his opinion in accordance with the conditions provided under the law. (5) Without prejudice to the provisions of this Act, the Commission may authorise a transfer of personal data to a recipient country or any other country which does not have adequate level of protection in its laws, if the data controller satisfies the Commission that there is adequate safeguards with respect to the protection of personal data, fundamental rights and freedoms of the data subject and the exercise of the data subject’s rights, and that such safeguards can be appropriated through adequate legal and security measures and contractual clauses in particular. PART VI RIGHTS OF DATA SUBJECTS Right of access to personal data 33.-(1) Subject to the provisions of this Act, a data subject shall be entitled(a) to be informed by any data controller whether his personal data are being processed by or on behalf of that data controller; (b) to be given by the data controller a description of22