[22nd December 2023] REPUBLIC OF SEYCHELLES Data Protection Act SUPPLEMENT TO OFFICIAL GAZETTE 672 ACT personal data in any manner that is incompatible with the purpose for which such data has been collected, commits an offence. (2) A data processor who, without lawful justification, discloses personal data processed by him or her without the prior authority of the data controller on whose behalf the data is being or has been processed commits an offence. (3) Subject to subsection (4), any person who — (a) obtains access to personal data, or obtains any information constituting such data without the prior authority of the data controller or data processor by whom the data is kept; or (b) discloses the data or information to another person who is not entitled to access such data or information commits an offence. (4) Subsection (3) shall not apply to a person who is an employee or agent of a data controller or data processor and who is acting within his or her mandate with the data controller or data processor. (5) Any person who offers to sell personal data, where such personal data has been obtained in breach of subsection (1), commits an offence. Obstruction 49.(1) No person shall obstruct the Commission or any person acting on behalf or under the direction of the Commission in the performance of the Commission's duties and functions under this Act. (2) Any person who contravenes this section commits an offence and liable on summary conviction to a fine not exceeding SR200,000. Offence for which no specific penalty provided 50.(1) Any person who commits an offence under this Act for which no specific penalty is provided or who otherwise contravenes this Act shall be liable on conviction to imprisonment not exceeding 2years or to a fine of level 5 on the Standard Scale.