28.3. The data subject who is disagreement with the decision specified in Paragraphs 28.1 and 28.2 of this Law may appeal to the court. Article 29. Prohibitions 29.1. It is prohibited to collect, process, or use data from the data subject for purposes other than those specified in the Law or for purposes different from the initial purpose. 29.2. It is prohibited to violate the rights and freedoms of the data subject during the electronic data processing without any human intervention. 29.3. It shall be prohibited for a person who acquired the data under this law to disclose the data to others. Article 30. Liability for the Violation of the Law 30.1. The official in violation of this Law whose actions are not of a criminal nature shall be subject to liability as specified in the Law on Civil Service or the Labor Code. 30.2. A person or legal entity that violates this Law shall be subject to liability specified in the Criminal Code or the Law on Violations. Article 31. Transfer Arrangements 31.1. Prior to the entry into force of this law, non-overlapping physiological data (fingerprints) collected by the data controller, other than those permitted by law, shall be erased. 31.2. A working group shall be established by the decision of the Government for the organization and monitoring of the activities specified in Paragraph 31.1 of this Law. Article 32. Entry into Force 32.1. The law shall come into force on May 1, 2022. THE CHAIRMAN OF THE STATE GREAT KHURAL OF MONGOLIA ZANDANSHATAR.G