120 No. 3 of
2021]
Data Protection
(2) Where processing has been restricted under subsection
(1), that personal data shall, with the exception of storage, only be
processed with the data subject’s consent or for the establishment,
exercise or defence of legal claims or for reasons of important
public interest or where the law compels that processing.
(3) A data subject who has obtained a restriction on the
processing of that data subject’s personal data pursuant to subsection
(1) shall be informed by the data controller before the restriction of
processing that data is lifted.
Information
when
personal
data
collected
directly from
data subject
64. A data controller shall where personal data relating to the
data subject is collected directly from the data subject, concurrently
provide the data subject with the following information, unless it is
established that the data subject is in receipt of that information:
(a) the name and address of the data controller;
(b) the purpose of the processing;
(c) if it is obtained for the purpose of direct marketing,
existence of the right to object, to the intended processing
of personal data relating to that data subject;
(d) where applicable, the fact that the controller intends to
transfer personal data to a third country or international
organisation and the safeguards put in place for that
transfer;
(e) whether compliance with the request for information is
compulsory or not, as well as what the consequences
of the failure to comply are;
(f) taking into account the specific circumstances in which
the data is collected, any supporting information, as
necessary to ensure fair processing for the data subject,
such as—
(i) the recipients or categories of recipients of the
data; and
(ii) the existence of the right to access and rectify
the personal data relating to that data subject,
except where that additional information, taking
into account the specific circumstances in
which the data is collected, is not necessary to
guarantee accurate processing.
Right to data
portability
65. (1) A data subject has the right to receive that data subject’s
personal data in a structured, commonly used, machine readable or
otherwise legible format and may transmit that data to another
data controller.
Seleccionar párrafo de destino3
Conectar a un párrafo
Connect to an entity
Disable highlights
Añadir a la tabla de contenidos