[22nd December 2023] REPUBLIC OF SEYCHELLES Data Protection Act SUPPLEMENT TO OFFICIAL GAZETTE 652 ACT deletion or erasure of personal data or the restriction of its processing; (b) objection to further processing of data and circumstances under which such objection is legitimate; (c) portability of data and mechanisms to request such access by a third party; (d) the existence of the data subject's right to lodge a complaint with the Commission and the contact details of the Information Commission. (3) The data controller may restrict, wholly or partly, the provision of information to the data subject under subsection (1) to the extent that and for so long as the restriction is in place, having regard to the rights and legitimate interests of the data subject, a necessary and proportionate measure to — (a) avoid obstructing an official or legal inquiry, investigation or procedure; (b) avoid prejudicing the prevention, detection, investigation or prosecution of criminal offences or the execution of criminal penalties; (c) protect public security; (d) protect national security; (e) protect the rights and freedoms of others. (4) Where the provision of information to a data subject under subsection (1) is restricted, wholly or partly, the data controller shall inform the data subject in writing without undue delay — (a) that the provision of information has been restricted; (b) of the reasons for the restriction;