Fifth principle Personal data processed for any purpose shall not be kept longer than is necessary for that purpose or those purposes. Sixth principle Personal data shall be processed in accordance with the rights of the data subjects under this Act. Seventh principle Appropriate security and organisational measures shall be taken against unauthorised or unlawful processing of personal data and against accidental loss or destruction of, or damage to, personal data. Eighth principle Personal data shall not be transferred to another country, unless that country ensures an adequate level of protection for the rights of data subjects in relation to the processing of personal data. Amended by [Act No. 14 of 2009] SECOND SCHEDULE (section 6) I, …………………………………………………………make oath/solemnly affirm/ declare that I will faithfully and honestly fulfill my duties as authorised officer/Commissioner in conformity with the Data Protection Act 2004 and that I shall not without the due authority in that behalf disclose or make known any matter or thing which comes to my knowledge by reason of my duties as such. District Magistrate Port Louis