[22nd December 2023] REPUBLIC OF SEYCHELLES Data Protection Act SUPPLEMENT TO OFFICIAL GAZETTE 654 ACT (2) Where the data controller would otherwise be required to erase personal data under subsection (1) but the personal data must be maintained for evidence, the data controller shall restrict its processing. (3) Where a data subject contests the accuracy of personal data but it is not possible to ascertain whether it is accurate or not, the data controller shall restrict its processing. (4) The data controller shall delete personal data or restrict its processing based on the provisions of this Act whether or not the data subject makes a request. Right to object the processing of data for a specific purpose 30.(1) The data subject shall have the right to restrict or prevent the processing of personal data by a data controller when processing — (a) has served its purpose and data processing is no longer necessary; (b) is conducted on the basis of a legal ground that is no longer in force; or (c) is made contrary to the provisions of the law. (2) The Minister may, in consultation with the Commission, make such regulations as the Minister considers appropriate to provide suitable measures to safeguard a data subject’s rights, freedoms and legitimate interests in connection with the taking of qualifying significant decisions based solely on automated processing. Right to data portability 31.(1) The data subject shall have the right to — (a) request the data controller to allow the data subject access to personal data in a structured, machine-readable and interoperable format; or (b) transfer personal data from one data controller to another data controller.