Article 36: Transfer of personal data to a non-member ECOWAS country 1) The data controlier shall transfer personal data to a non-member ECOWAS country on~ where such a country provides an adequate level of protection for privacy, freedoms and the fundamental r"lghts of individuals In relation to the processing or possible processing of such data. 2) The data controller shall inform the Data Protection Authority prior to any transfer of personal data to such a third country Article 37: Networicing files containing personal data Networking of fIles as described under Article 12 of this Supplementary Act shall enable attainment of legal or statutory objectives that hold a legitimate interest for data controllers. It shall not lead to discrimination nor prejudice the rights, liberties and guarantees of data subjects, nor be accompanied by appropriate security measures, and must take into account the relevance of the data being combined. CHAPTER VI RIGHTS Of THE INDIVIDUAL WHOSE PERSONAL DATA ARE THE SUBJECT OF PROCESSING Artids 38: Right to information The data controller shall provide the individual Whose personal data is being processed with Ihe following Information, no later than at the time of collec!"lon of the data and irrespective of the means and media: 1) his identity and, where applicable, the identity of his representative: 2) the defined purpose{s) for which the data is to be processed; -14-