23. Right to the withdrawal of consent. – (1) A data subject may, by a written notice withdraw his consent to the processing of personal data which relates to him at any point in time. (2) The data controller shall, upon receiving the notice under sub-section (1), cease the processing of personal data. (3) The withdrawal of the consent shall not affect the lawfulness of the processing based on consent before its withdrawal. (4) The failure of the data controller to comply with sub-section (2) shall be construed as an offence and convicted, therefore, liable to a fine not exceeding 50,000 USD or an amount equivalent to Pakistani Rupees. 24. The extent of disclosure. – Notwithstanding section 8, the personal data of a data subject may be disclosed by a data controller for any purpose other than the purpose for which the personal data was stated to be disclosed at the time of its collection or any other purpose directly related to that purpose under the following circumstances: (a) the data subject has given his consent to the disclosure; (b) the disclosure — (i) is necessary for preventing or detecting a crime, or for investigations; or (ii) was required or authorised by or under any law or by the order of a court; (c) the data controller acted in the reasonable belief that in law he has the right to disclose the personal data to the other person; (d) the data controller acted in the reasonable belief that he had the consent of the data subject if the data subject had known of the disclosing of the personal data and the circumstances of such disclosure; or (e) the disclosure was justified in the interest of the public due to the circumstances determined by the Commission in advance of the disclosure. 25. Right to prevent processing likely to cause damage or distress. – (1) Subject to sub-section (2), a data subject may, at any time shall issue a notice in writing, including digitally to a data controller referred to as the “data subject notice” require the data controller at the end of such period as its reasonable in the circumstances, to— 25

Select target paragraph3

Connect to a paragraph
Connect to an entity
Disable highlights
Add to table of contents