i THE PERSONAL DATA PROTECTION BILL, 2018 CHAPTER I PRELIMINARY 1. Short title, extent and commencement. — ................................ ................................ ................ 1 2. Application of the Act to processing of personal data. — ................................ ........................ 1 3. Definitions. — In this Act, unless the context otherwise requires, — ................................ ...... 2 CHAPTER II DATA PROTECTION OBLIGATIO NS 4. Fair and reasonable processing. — ................................ ................................ ........................... 6 5. Purpose limitation. — ................................ ................................ ................................ ............... 6 6. Collection limitation. —. ................................ ................................ ................................ ......... 7 7. Lawful processing. — ................................ ................................ ................................ ............... 7 8. Notice. — ................................ ................................ ................................ ................................ .. 7 9. Data quality. — ................................ ................................ ................................ ......................... 8 10. Data storage limitation. — ................................ ................................ ................................ ...... 8 11. Accountability. — ................................ ................................ ................................ ................... 9 CHAPTER III GROUNDS FOR PROCESSI NG OF PERSONAL DATA 12. Processing of personal data on the basis of consent. — ................................ .......................... 9 13. Processing of personal data for functions of the State. — ................................ ................... 10 14. Processing of personal data in compliance with law or any order of any court or tribunal. — 10 15. Processing of personal data necessary for prompt action. — ................................ .............. 10 16. Processing of personal data necessary for purposes related to employment. — .................. 10 17. Processing of data for reasonable purposes. — ................................ ................................ .... 11 CHAPTER IV GROUNDS FOR PROCESSI NG OF SENSITIVE PERSONAL D ATA 18. Processing of sensitive personal data based on explicit consent. — ................................ .... 11 19. Processing of sensitive personal data for certain functions of the State. — ........................ 12 20. Processing of sensitive personal data in compliance with law or any order of any court or tribunal. — ................................ ................................ ................................ ........................... 12 21. Processing of certain categories of sensitive personal data for p rompt action. — ............... 12 ii 22. Further categories of sensitive personal data. — ................................ ................................ .. 13 CHAPTER V PERSONAL AND SENSITI VE PERSONAL D ATA OF CHILDREN 23. Processing of personal data and sensitive personal data of children. — .............................. 13 CHAPTER VI DATA PRINCIPAL RIGHT S 24. Right to confirmation and access. — ................................ ................................ ................... 14 25. Right to correcti on, etc. — ................................ ................................ ................................ .... 14 26. Right to Data Portability. — ................................ ................................ ................................ 15 27. Right to Be Forgotten. — ................................ ................................ ................................ ..... 16 28. General conditions for the exercise of rights in this Chapter. — ................