No. 3
Data Protection
intends to process personal data of a data subject who is a child or
any other natural person lacking legal capacity to provide consent
shall obtain the consent from a parent or legal guardian, as the case
may be, of the data subject.
(3) a data controller or data processor who obtains consent in
accordance with subsection (2) shall put in place appropriate
mechanisms to verify the age of the child or the mental capacity of
the other natural person, as the case may be, and the identity of the
parent or legal guardian providing the consent.
18.__(1) without prejudice to section 8(2), a data controller or
data processor shall not process personal data of a data subject
relating to a criminal offence, conviction, or security measure
imposed on the data subject unless—
(a) the processing is authorized by a written law and the law
provides for the necessary safeguards for the rights and freedoms
of the data subject; or
(b) the processing is carried out under the control of an organ
of Government or other official authority.
13
Processing of
personal data
relating to
criminal
offences,
convictions,
etc.
(2) For purposes of this section “organ of Government” means
the three branches of Government, a local authority and a body or a
committee established or instituted by, or under, any written law.
Part IV—rIGhts OF a Data suBJect
__
19. (1) a data subject has the right to obtain from a data
controller or data processor, confirmation of whether personal data
concerning the data subject is being processed by the data controller
or data processor, and where that is the case, the right to access the
personal data being processed.
(2) where the data controller or data processor confirms the
processing of the personal data of the data subject, the data
controller or data processor shall provide the data subject with—
(a) on demand, a copy of the personal data being processed—
(i) in a commonly used electronic format;
(ii) within thirty days of receipt of the request; and
(iii) where practicable, at no expense to the data subject; and
(b) information specified in section 15(1).
20.__(1) a data subject has the right to receive personal data
concerning the data subject from a data controller in a structured,
commonly used and machine-readable format where the processing
of the personal data is—
right to
access
personal data
right to data
portability