28
appeal
against
decisions
of the
authority
civil remedies
Obstruction,
interference
with the
authority
Breach of
confidentiality
Data Protection
No. 3
administrative penalty or an order to make good of profits, issued
pursuant to this section commits an offence and shall, upon
conviction, be liable to—
(a) in the case of a natural person, a fine of k10,000,000 and
to imprisonment for two years; or
(b) in the case of a legal person, a fine of k50,000,000.
(5) where pursuant to this section, the authority imposes an order
to pay compensation or make good of profits or pay an
administrative penalty on a data controller or data processor and the
data controller or data processor fails to pay the compensation or
penalty of make good of the profits within thirty days from the date
the data controller or data processor receives the decision, the
authority may recover the compensation profits or penalty as a civil
debt due to the awardee of the compensation or the authority, as the
case may be.
Part X—MIsceLLaneOus
46.__(1) a person aggrieved by a decision of the authority under
this act may, within thirty days of receiving the decision, apply to
the high court for review of the decision.
(2) the high court shall, upon hearing a matter brought pursuant
to subsection (1)—
(a) confirm, vary or set aside the decision; or
(b) make any other order as the court considers fair and just.
47. notwithstanding sections 44 and 45, a data subject who
suffers injury, loss or harm, as a result of a contravention of this act
by a data controller or data processor, may commence legal action
for a civil remedy against the data controller or data processor
concerned.
48. a person who obstructs or interferes with the authority, an
officer of the authority or any person authorized by the authority to
carry out any function under this act in the performance of any
function under this act, commits an offence and shall, upon
conviction, be liable to a fine of k10,000,000 and to imprisonment
for two years.
49. a person who—
(a) being a member of the authority, an employee of the
authority or a person authorized to perform any function under
this act, publishes or communicates to any other person without
lawful authority any information acquired by that person in the
course of duty; or