(e) for protecting the vital interests of the data subject;
(f) for compliance with any court order of competent jurisdiction;
(g) for legitimate interests pursued by the data controller; or
(h) for the exercise of any functions conferred on any person by or under any law.
7.
Notice to the data subject. –
(1) A data controller shall by written notice including digitally inform a data subject or
where this is not practical, it shall be provided by another data controller that
exercises control over the same personal data—
(a) that is collected by or on behalf of a data controller, along with its description;
(b) to provide the legal basis for the processing of personal data and the time duration
for which data is likely to be processed and retained thereafter for the purpose
for which the personal data is or to be collected and processed further;
(c) of any information available to the data controller as to the source of that personal
data;
(d) information regarding any cross-border transfer of personal data that the data
controller intends to carry out, if applicable;
(e) inform the data subject about their rights as mentioned in this Act including the
data subject’s right to request access and correction of the personal data and
provide information on contacting the data controller with any inquiries or
complaints concerning personal data;
(f) provide the list of third parties to whom the data controller shall or may disclose
the personal data;
(g) the choices and means, the data controller offer the data subject for restricting
the processing of personal data, including personal data relating to other persons
who may be identified from that personal data;
(h) whether it is obligatory or voluntary for the data subject to supply the personal
data; and
(i) where it is obligatory for the data subject to supply the personal data, but in case
of failure to comply with the request, the data subject shall face the
consequences.
(2) The notice under sub-section (1) shall be rendered as soon as reasonably possible by
the data controller—
14