TABLE OF CONTENTS
Statement of Objectives ............................................................................................................. 4
1.
Short title, extent and commencement. ........................................................................... 6
2.
Definitions. ...................................................................................................................... 6
3.
Scope and applicability. ................................................................................................. 11
4.
Interpretation. ................................................................................................................ 12
5.
Grounds for processing personal data. .......................................................................... 12
6.
Consent for personal data processing. ........................................................................... 13
7.
Notice to the data subject. ............................................................................................. 14
8.
Non-disclosure of personal data. ................................................................................... 15
9.
Security requirements. ................................................................................................... 15
10.
Data retention requirements. ......................................................................................... 16
11.
Data integrity. ............................................................................................................... 16
12.
Record to be kept by the data controller. ....................................................................... 16
13.
Personal data breach notification. .................................................................................. 17
14.
Processing personal data of children. ............................................................................ 18
15.
Additional requirements for processing sensitive and critical personal data. ............... 18
16.
Right to access. .............................................................................................................. 20
17.
Compliance with the data access request. ..................................................................... 20
18.
Circumstances of refusal to comply with the data access request. ................................ 21
19.
Right to correction. ........................................................................................................ 22
20.
Compliance with a data correction request. .................................................................. 22
21.
Circumstances of refusal to comply with the data correction request. .......................... 23
22.
Notification of refusal to comply with a data correction request. ................................. 24
23.
Right to the withdrawal of consent. ............................................................................... 25
24.
Extent of disclosure. ...................................................................................................... 25
25.
Right to prevent processing likely to cause damage or distress. ................................... 25
1