The Data Protection Bill, 2012
circumstances of the particular case;
(g) the information—
(i) will not be used in a form in which the data subject is
identified; or
(ii) will be used for statistical or research purposes and
will not be published in a form that could reasonably be
expected to identify the data subject; or
(h) the collection of the information is in accordance with an
authority granted under this Act or any other written law.
Data processing.
10. Where personal data concerning a data subject is destined for
automated or manual processing, the data subject shall have the
right on request to—
(a) information on the person processing data concerning
him or her;
(b) place of origin of the data;
(c) use of the data collected;
(d) any other person to whom the data is transmitted; and
(e) rectification of incorrect data and the right to erasure of
illegally processed data.
Protection and security
of personal
information.
11. An agency that holds personal information shall ensure that
—
(a) the information is protected, by such security safeguards
as are reasonable in the circumstances against —
(i) loss, damage and destruction;
(ii)
access and use by an unauthorised person,
modification, or negligent disclosure or use; and
(b) where it is necessary for the information to be transmitted to a
third party, in connection with the provision of a service to the
agency, everything reasonably within the power of the agency is
done to prevent unauthorised use or unauthorised disclosure of the
information.
10