providers shall be authorized to process personal
data in connection with billing charges for
information and communications services, to the
extent required and necessary for calculating and
billing charges, in particular, the data relating to the
date, the duration and place of the service to which
it pertains.
(3) In addition to the identification and other
personal data referred to in subsections (1) and
(2), information and communications service
providers may also process the type of personal
data which is technically essential for the provision
of services.
(4) Information and communications service pro
viders shall use in their operations for providing
information and communications services only the
type of information and communications appara
tuses which have sufficient facilities to ensure that
personal data is processed only where it is
absolutely necessary in terms of the provision of
services and for the implementation of other
objectives specified in this Act.
(5) Information and communications service pro
viders shall delete any personal data from its
records that is used for purposes other than those
defined in subsections (1) to (3) immediately on
gaining knowledge of an unlawful data processing.
(6)
The
provision
of
information
and
communications services shall not be rendered
contingent on the user providing consent for
processing his or her personal data for purposes
other than those defined in subsections (1) to (3).
(7) Information and communications service pro
viders shall enable the end-users to have access
to information concerning the type of personal data
the service provider is processing and the
objectives, at any time before and during the use of
the information and communications services.
Intercept
138. (1) The national security agencies and investi
gating authorities may monitor, intercept and store
136