Act Data Protection And Privacy Act 2019 (3) Except for data collected or processed under subsection (2), where a data subject objects to the collection or processing of personal data, the person who is collecting or processing the personal data shall stop the collection or processing of the personal data. 8. Personal data relating to children. A person shall not collect or process personal data relating to a child unless the collection or processing thereof is; (a) carried out with the prior consent of the parent or guardian or any other person having authority to make decisions on behalf of the child; (b) necessary to comply with the law ; or (c) for research or statistical purposes. 9. Prohibition on collection and processing of special personal data. (1) A person shall not collect or process personal data which relates to the religious or philosophical beliefs, political opinion, sexual life, financial information, health status or medical records of an individual. (2) This section does not apply to information collected under the Uganda Bureau of Statistics Act. (3) A data collector, data processor and data controller may collect or process personal data specified under subsection(!) where(a) the collection or processing of the data is in the exercise or performance of a right or an obligation conferred or imposed by law on an employer; (b) the information is given freely and with the consent of the data subject; or