CHAPTER VII
OBLIGATIONS OF THE PERSONAL. DATA CONTROLLER
ArtiCle 42:
Obligations of confidentiality
Processing of personal data shall be confidential. It shall be carried out
exclusively by persons acting under the authorFty of the data controller and solely
upon his instructions
Article 43:
Obligations of Security
The data controller shall take all necessary precautions in relation to the nature of
data, and in particular to ensure that it is not deformed, damaged or accessible to
unauthorised third parties.
Article 44:
Obligations of Preservation
Personal data shall be kept for a period of time set by a regulatory text and only
for the purposes for which they were obtained.
Article 45:
Obligations of Durability
1) The data controller shall take all the necessary measures to ensure that the
personal data processed can be utilised, no matter the technical medium.
2) He shall particularry ensure that technological development does not constitute
an obstacle to such utilisation.
CHAPTER VIJI
FtNAL PROVISIONS
Article 46:
Amendment and reView
1) Any Member State. the Council of Ministers and the ECOWAS Commission
may submit proposals for the amendment and review of this Supplementary Act.
2) All amendment and revision proposals shall be submftted to the ECOWAS
Commission for onward communication to the Member States no more than thirty
(30) days after reception. The Council of Ministers Shall examine the amendment
- 16-