120 No. 3 of 2021] Data Protection (2) Where processing has been restricted under subsection (1), that personal data shall, with the exception of storage, only be processed with the data subject’s consent or for the establishment, exercise or defence of legal claims or for reasons of important public interest or where the law compels that processing. (3) A data subject who has obtained a restriction on the processing of that data subject’s personal data pursuant to subsection (1) shall be informed by the data controller before the restriction of processing that data is lifted. Information when personal data collected directly from data subject 64. A data controller shall where personal data relating to the data subject is collected directly from the data subject, concurrently provide the data subject with the following information, unless it is established that the data subject is in receipt of that information: (a) the name and address of the data controller; (b) the purpose of the processing; (c) if it is obtained for the purpose of direct marketing, existence of the right to object, to the intended processing of personal data relating to that data subject; (d) where applicable, the fact that the controller intends to transfer personal data to a third country or international organisation and the safeguards put in place for that transfer; (e) whether compliance with the request for information is compulsory or not, as well as what the consequences of the failure to comply are; (f) taking into account the specific circumstances in which the data is collected, any supporting information, as necessary to ensure fair processing for the data subject, such as— (i) the recipients or categories of recipients of the data; and (ii) the existence of the right to access and rectify the personal data relating to that data subject, except where that additional information, taking into account the specific circumstances in which the data is collected, is not necessary to guarantee accurate processing. Right to data portability 65. (1) A data subject has the right to receive that data subject’s personal data in a structured, commonly used, machine readable or otherwise legible format and may transmit that data to another data controller.

Select target paragraph3

Connect to a paragraph
Connect to an entity
Disable highlights
Add to table of contents