Article 36: Transfer of personal data to a non-member ECOWAS country
1) The data controlier shall transfer personal data to a non-member ECOWAS
country on~ where such a country provides an adequate level of protection for
privacy, freedoms and the fundamental r"lghts of individuals In relation to the
processing or possible processing of such data.
2) The data controller shall inform the Data Protection Authority prior to any
transfer of personal data to such a third country
Article 37:
Networicing files containing personal data
Networking of fIles as described under Article 12 of this Supplementary Act shall
enable attainment of legal or statutory objectives that hold a legitimate interest
for data controllers. It shall not lead to discrimination nor prejudice the rights,
liberties and guarantees of data subjects, nor be accompanied by appropriate
security measures, and must take into account the relevance of the data being
combined.
CHAPTER VI
RIGHTS Of THE INDIVIDUAL WHOSE PERSONAL DATA ARE THE
SUBJECT OF PROCESSING
Artids 38:
Right to information
The data controller shall provide the individual Whose personal data is being
processed with Ihe following Information, no later than at the time of collec!"lon of
the data and irrespective of the means and media:
1) his identity and, where applicable, the identity of his representative:
2) the defined purpose{s) for which the data is to be processed;
-14-