observance of good practice to ensure compliance with this Act.
(2) The Commission may charge the fees that the Commission in
consultation with the Minister for Finance determines for the provision of
services by the Commission.
(3) The Commission is responsible for the conduct of public
education and awareness campaigns to the public on the rights of data subjects
and the obligations of data controllers under this Act.
International co-operation
87. The Commission shall perform the data protection functions that are
necessary to give effect to any international obligations of the Republic.
Prohibition to purchase, obtain or disclose personal data
88. (1) A person shall not
(a) purchase the personal data or the information contained in the
personal data of another person;
(b) knowingly obtain or knowingly or recklessly disclose the personal
data or the information contained in the personal data of another
person; or
(c) disclose or cause to be disclosed to another person the
information contained in personal data.
(2) A person who contravenes subsection (1) commits an offence and is
liable on summary conviction to a fine of not more than two hundred and fifty
penalty units or to a term of imprisonment of not more than two years or to both.
Prohibition of sale of personal data
89. (1) A person who sells or offers to sell personal data of another
person commits an offence and is liable on summary conviction to a fine
of not more than two thousand five hundred penalty units or to a term of
imprisonment of not more than five years or to both.
(2) For the purposes of this section an advertisement which indicates that
personal data is or may be for sale is an offer to sell the data.
Credit bureau
90. (1) A credit bureau shall for the purposes of this Act be a data
controller and
(a) is subject to the orders or directions emanating from the
Commission,
(b) shall exercise the rights under this Act, and
(c) be liable for any offences committed by the Credit Bureau
and its officers under this Act.
(2) A person who suffers damage which arises from the supply of
inaccurate or incomplete information by a credit bureau about the person is
entitled in addition to the remedies under this Act to such further rem- edies that
are provided under the Credit Reporting Act, 2007 (Act 726).