PART V DUTIES OF THE DATA CONTROLLER AND DATA PROCESSOR 21. Disclosures when collecting data directly from the data subject 22. Disclosures when not collecting data directly from the data subject 23. Authority to process 24. Security 25. Security breach notification 26. Obligation of notification to the Authority 27. Content of the notification 28. Authorization 29. Openness of the processing 30. Accountability PART VI RIGHTS OF THE DATA SUBJECT Draft Data Protection Bill Version 1.0 3