2. Be notified of any disclosure of inaccurate Personal Data. 3. Obtain a copy of the Personal Data thereof after paying an amount that shall not exceed the service charge. Article (7) The controls and procedures, related to individuals’ exercise of rights provided for in the two preceding Articles, shall be specified by a decision of the Minister. Chapter Three Liabilities of Controller and Processor Article (8) The Controller shall abide by the following: 1. Processing Personal Data honestly and legitimately. 2. Consider the controls related to designing, changing or developing products, systems and services pertinent to Personal Data Processing. 3. Taking appropriate administrative, technical and financial precautions to protect Personal Data, in accordance with what is determined by the Competent Department. 4. The privacy protecting policies developed by the Competent Department, and a decision thereon shall be issued by the Minister. This document is not official and the official version of the law is the one published in the Official Gazette number 15 of year 2016 that is available on almeezan.qa