Act
Data Protection And Pri vacy A ct
2019
(6) Where the Authority is satisfied on a complaint by a data
subject that the data controller has failed to comply , the Authority
shall order the data controller to comply within seven days
28. Rectification, blocking, erasure and destruction of personal
data.
(1) Where the Authority is satisfied on a complaint of a data
subject that personal data on that data subject is inaccurate, the
Authority may order the data controller to rectify , update , block ,
erase , or destroy the data .
(2) Subsection (1) applies whether the data is an accurate record
of information received or obtained by the data controller from the
data subject or a third party.
(3) Where the data is an inaccurat e record of the information, the
Authority may direct the data controller to update the statement of the
true facts which the Authority considers appropriate.
(4) Where the data complained of has been rectified, blocked,
updated , erased or destroyed, the data controller is required to notify
third parties to whom the data has been previously disclosed of the
rectification , blocking , updated, erasure or destruction.
PART VI-DATA
PROT ECTION R EGISTER
29. Data protection register.
(1) The Authority shall keep and maintain a data protection
register.
(2) The Authority shall register in the data protection register ,
every person , institution or public body collecting or processing
personal data and the purpo se for which the personal data is collected
or proces sed.
(3) An applicat ion by a data controller or other person to register
shall be made in the prescribed manner.