a contract, and
(i)
the request of the data subject in terms of the data
contract has been met; or
(ii)
appropriate measures have been taken to protect the
data subject’s legitimate interests such as requiring a
data controller to provide a data subject with
sufficient information about the decision to enable
him to make representations and allowing a data
subject to make representations about a decision
referred to in subsection (1); or
(b) is governed by a law or code in which appropriate measures are
specified for protecting the legitimate interests of data subjects.
Notifications
53
(1) A data controller shall notify the Commission of the processing of personal
information to which the Act applies
(2) The notification contemplated in section (1) shall contain the following
particulars –
(a) the name and address of the data controller;
(b) the purpose of the processing;
(c) a description of the categories of data subjects and of the
information or categories of information relating thereto;
(d) the recipients or categories of recipients to whom the personal
information may be supplied;