Data Protection Act [22nd December 2023] REPUBLIC OF SEYCHELLES SUPPLEMENT TO OFFICIAL GAZETTE PART V - DATA SUBJECTS RIGHTS 25. 26. 27. 28. 29. 30. 31. 32. Rights of data subjects Right to be informed Right to access data Right of rectification or correction Right to cancel or delete data Right to object the processing of data for a specific purpose Right to data portability Right to compensation 33. 34. 35. 36. 37. 38. 39. 40. 41. 42. 43. 44. 45. 46. PART VI - OBLIGATIONS OF DATA CONTROLLERS AND DATA PROCESSORS Safe custody Transparency Privacy by design Data processors Records of processing activities Logging Blocking data Data protection impact assessment Prior consultation Security of processing Notification of a personal data breach to the Commission Communication of a personal data breach to the data subject Data protection officer Tasks of data protection officer PART VII - TRANSFER OF DATA TO THIRD PARTIES 47. Cross-border data flows PART VIII - OFFENCES AND PENALTIES 48. 49. 50. 51. Unlawful disclosure of personal data Obstruction Offence for which no penalty provided General conditions for imposing administrative fines 629 ACT

Select target paragraph3