314
The Data Protection Bill, 2018
3. This Act does not apply to the processing of
personal data by or on behalf of a public bodywhich involves national security, including
activities that are aimed at assisting in the identification of
the financing of terrorism and related activities, defence or
public safety; or
the purpose of which is the prevention, detection
and identification of the proceeds of unlawful activities and
the combating of money laundering activities, investigation
or proof of offences, prosecution of offenders or the
execution of sentences or security measures.
PART Il—OBJECTS AND PRINCIPLES OF
PROTECTION OF PERSONAL DATA
Application.
4. The following principles shall guide the
interpretation and application of this Act information shall be collected, processed, stored or
dealt with in any other maimer if it is necessary for
or directly related to a lawful, explicitly defined
purpose and shall not intrude on the privacy of the
data subject;
information shall be collected directly from and
with the consent of the data subject;
where information relating to the data subject is
held by a third party, the information may only be
released to another person or put to a different use
with the consent of the data subject;
the data subject shall be informed of the purpose to
which the information shall be put and the
intended recipients of that information at the time
of collection;
information shall not be kept for a longer period
than is necessary for achieving the purpose for
which it was collected;
information shall not be distributed in a manner
that is incompatible with the purpose for which it
was collected with the consent of the person and
subject to any notification that would attract
objection;
reasonable steps shall be taken to ensure that the
information processed is accurate, up-to date and
complete;
Principles of data
protection.