[22nd December 2023] REPUBLIC OF SEYCHELLES Data Protection Act SUPPLEMENT TO OFFICIAL GAZETTE 628 ACT DATA PROTECTION ACT, 2023 (Act 24 of 2023) ARRANGEMENT OF SECTIONS PART I - PRELIMINARY Sections 1. Short title 2. Interpretation 3. Application 4. Exemptions PART II - INFORMATION COMMISSION 5. 6. 7. 8. 9. 10. 11. 12. 13. 14. Information Commission Powers and duties of Commission Investigations and audits Enforcement notice and corrective powers Preliminary injunction Disclosure Liability Powers and duties of Chief Executive Officer Right of appeal Cooperation PART III - DATA PROTECTION 15. 16. 17. 18. 19. 20. 21. Processing personal data Data retention Data minimization Data quality Access, requests and correction of data Data security and confidentiality Accountability for data processing activities PART IV - PROCESSING SPECIAL CATEGORIES OF PERSONAL DATA 22. Sensitive data 23. Data related to minors 24. Processing of personal data relating to offences and criminal conviction

Select target paragraph3