316
The Data Protection Bill, 2018
for the prevention, detection, investigation,
prosecution and punishment of crime;
for the protection of the interests of the data
subject or another person;
(iii)to comply with an obligation imposed by law; or
(iv) in the interest of national security; or
(f) compliance is not reasonably practical in the
circumstances of the case.
(3) An agency shall collect, store or use personal
datausing lawful means; or
using means that, in the circumstances, do not
intrude to an unreasonable extent, upon the
personal affairs of the data subject except in
accordance with this Act or any other written law.
8. An agency that collects orprocesses personal
data shall ensure that the data is complete, accurate, up-todate and not misleading having regard to the purpose for
the collection or processing of the personal data.
9. A data subject has a right to be informed by the agency of the use to which the
data is to be put;
access the data with respect to the data subject
which is in possession of an agency;
object to the collection or processing of all or part
of data by an agency;
correction of false or misleading data;
deletion of misleading, false or data which has
been objected to; and
an explanation in respect of the processing of data
and the outcome of such processing;
10. (1) Before an agency collects personal data
directly from a data subject, the agency shall in so far as is
reasonably practicable, inform the data subject the fact that the information is being collected;
the purpose for which the information is being
collected and specify the use to which such
information shall be put;
9iatY of
information.
Rights of a data
subject.
Duty.
to notify.