DATA PROTECTION LAWS OF THE WORLD ONLINE PRIVACY ONLINE PRIVACY The Electronic Communications and Information Society Services Law establishes the right for all Citizens to enjoy protection against abuse or violations of their rights through the Internet or by other electronics means, such as: The Law also applies in the online environment. the right to confidentiality of communications and to privacy and non-disclosure of their data For example, a Macau company that collects personal data from Macau residents through its website (eg, through cookies) must fulfil all obligations under the Law imposed on data processors. In particular, the Macau company must inform data subjects of the personal data processing purpose and notify the OPDP about the personal data processing. the right to security of their information by improvement of quality, reliability and integrity of the information systems the right to security on the Internet, specifically for minors the right not to receive spam the right to protection and safeguarding to their consumer rights and as users of networks or electronic communications services. In view of the above it is in general not allowed to store any kind of personal data without prior consent of the user. This does not prevent technical storage or access for the sole purpose of carrying out the transmission of a communication over an e-communication network or if strictly necessary in order for the provider of an information society service to provide a service expressly requested by the subscriber/user. Traffic data The processing of traffic data is allowed when required for billing and payment purposes, but processing is only permitted until the end of the period during which the bill may lawfully be challenged or payment pursued. Traffic data must be eliminated or made anonymous when no longer needed for the transmission of the communication. The storing of specific information and the access to such information is only allowed on the condition that the subscriber/user has provided his or her prior consent. The consent must be based on accurate, clear and comprehensive information, namely about the type of data processed, the purposes and duration of the processing and the availability of data to third parties in order to provide value added services. Electronic communication operators may also store traffic data only to the extent required and the time necessary to market electronic communications services or provide 7 | Data Protection Laws of the World | Angola vs Macau | www.dlapiperdataprotection.com

Select target paragraph3