The Data Protection Bill, 2012 circumstances of the particular case; (g) the information— (i) will not be used in a form in which the data subject is identified; or (ii) will be used for statistical or research purposes and will not be published in a form that could reasonably be expected to identify the data subject; or (h) the collection of the information is in accordance with an authority granted under this Act or any other written law. Data processing. 10. Where personal data concerning a data subject is destined for automated or manual processing, the data subject shall have the right on request to— (a) information on the person processing data concerning him or her; (b) place of origin of the data; (c) use of the data collected; (d) any other person to whom the data is transmitted; and (e) rectification of incorrect data and the right to erasure of illegally processed data. Protection and security of personal information. 11. An agency that holds personal information shall ensure that — (a) the information is protected, by such security safeguards as are reasonable in the circumstances against — (i) loss, damage and destruction; (ii) access and use by an unauthorised person, modification, or negligent disclosure or use; and (b) where it is necessary for the information to be transmitted to a third party, in connection with the provision of a service to the agency, everything reasonably within the power of the agency is done to prevent unauthorised use or unauthorised disclosure of the information. 10