(1) Any data controller, his/her representative, agent or assignee who: (a) does not comply with the provisions of this Act or any regulations promulgated under this Act; obligations laid down in Articles 24 to 25 (b) who processes personal data in violation of the conditions imposed by Sections 11 (1), 12 and 13 (c)who processes data in violation of Sections 15 to 19 (d) who knowingly communicates incorrect or incomplete information (e) who having started, managed, continued to manage or terminated the automatic processing of personal data does so without meeting the requirements of Section 26 (f) who in violation of Section29 (2), refuses to communicate to the Authority information requested who transfers personal data or has personal data transferred to a country outside the SADC included in the list referred to in Article 44 (2), or any person who authorizes such transfers despite the requirements of Article 45; shall be guilty of an offence and liable to a fine not exceeding level eleven or to imprisonment for a period not exceeding seven years or to both such fine and such imprisonment. (taken from Postal and Telecommunications Act 12:05) Draft Data Protection Bill Version 1.0 48