49
A data subject may institute a civil action for damages in a court having jurisdiction
against a data controller for breach of any provision of this Act.
PART VI – GENERAL PROVISIONS
Unsolicited electronic communications
50
(1) In this section “direct marketing” means communication by whatever means
of any advertising or marketing material which is directed to particular data
subjects.
(2) A data subject is entitled any time by notice to a data controller to require
the data controller to cease, or not to begin, processing of personal data in
respect of which he is the data subject for the purposes of direct marketing.
(3) If the Commission is satisfied, on the application of any person who has
given notice under subsection (2) that the data controller has failed to
comply with the notice, the Commission may order the data controller to
take such steps for complying with the notice as the Commission thinks fit.
Automated decision making
51
(1) Subject to subsection (2), a person may not be subjected to a decision which
has legal effect on him, or which affects him significantly, based solely on the
automated processing of personal information intended to provide a profile
of certain aspects of his personality or personal habits/
(2) The provisions of subsection (1) shall not apply where the decision –
(a) has been taken in connection with the conclusion or performance of