P.U. (A) 335
PART II
PERSONAL DATA PROTECTION PRINCIPLES
General Principle
Consent of data subject
3.
(1)
A data user shall obtain consent from a data subject in relation to the
processing of personal data in any form that such consent can be recorded and
maintained properly by the data user.
(2)
If the form in which such consent in subregulation (1) is to be given also
concerns another matter, the requirement to obtain consent shall be presented
distinguishable in its appearance from such other matter.
(3)
A data user shall obtain consent referred to in subregulation (1) from the
parent, guardian or person who has parental responsibility on the data subject, if the data
subject is under the age of eighteen years.
(4)
A data user shall obtain consent the consent referred to in
subregulation (1) from a person who is appointed by a court to manage the affairs of the
data subject or a person authorized in writing by the data subject to act on his behalf if
the data subject is incapable of managing his own affairs.
(5)
The burden of proof for such consent referred to in subregulation (1) shall
lie on the data user.
Notice and Choice Principle
Details of data user
4.
For the purposes of paragraph 7(1)(d) of the Act, the data user shall at least
provide the data subject the details as follows:
(a)
designation of the contact person;
14