8 Personal Data Protection Act, No. 9 of 2022 Provided that, the withdrawal of such consent shall not affect the lawfulness of any processing taken place prior to such withdrawal. (2) Every data subject shall have the right to request a controller in writing, to refrain from further processing of personal data relating to such data subject, if such processing is based on the grounds specified in items (e) or (f) of Schedule I or item (f) of Schedule II. Right to rectification or completion 15. Every data subject shall have the right to request a controller in writing to rectify or complete the personal data relating to such data subject which is either inaccurate or incomplete, and the controller shall, upon such a written request made by the data subject, rectify or complete the personal data without undue delay subject to the provisions of section 17: Provided however, the provisions of this section shall not impose any obligation on a controller to collect and process any additional personal data that is not required for the purpose of processing: Provided further, where a controller is required to maintain personal data for the evidentiary purposes under any written law or on an order of a competent court, the controller shall refrain from further processing such personal data without rectifying. Right to erasure 16. Every data subject shall have the right to make a written request to the controller to have his personal data erased, under the following circumstances where– (a) the processing of personal data is carried out in contravention of the obligations referred to in sections 5,6,7,8,9,10 and 11; (b) the data subject withdraws his consent upon which the processing is based, in accordance with item (a) of Schedule I or item (a) of Schedule II;