Processes voice recordings, in Angola

Lei n.º 22/11, de 17 de Junho de 2011 (Protecção de Dados Pessoais), arts. 1-12, 16, 18-24, 30-32, 35-43 and 63-67 · Read the law's page

• Obtain the data subject's unequivocal, express consent before processing their personal data, or notify the Agência de Protecção de Dados, unless a contract-performance, legal-obligation, vital-interest, public-interest, or legitimate-interest ground applies.
• Obtain the data subject's consent or the APD's authorisation before processing personal data on their creditworthiness or solvency, unless the information comes from a publicly accessible source, and notify the data subject within sixty days of entering their data in a debtor file.
• Notify the Agência de Protecção de Dados, or obtain the recipient's express consent, before sending postal or electronic marketing messages or recording a call for commercial purposes, and let the recipient object to further messages free of charge at any time.
• Treat a recipient who processes communicated personal data for its own purposes as a controller in its own right, and one who processes it on your behalf and under your instructions as a subcontractor bound by a written contract, and obtain the APD's authorisation before interconnecting personal data held in different files unless a legal provision already permits it.
• Implement technical and organisational measures adequate to the risk presented by the processing and the nature of the data, and keep a document describing the security measures, standards and procedures applied.
• Keep personal data confidential, both as a data controller and as anyone who learns of it in the course of their duties, including after the relationship ends.
• Notify the Agência de Protecção de Dados before processing personal data, or obtain its authorisation where notification is not enough, and give it the particulars the law requires about the processing.

Lei n.º 22/11, de 17 de Junho de 2011, arts. 13-15 e 17 (dados sensíveis) · Read the law's page

• Do not process sensitive data (philosophical or political convictions, party or union membership, religious faith, private life, racial or ethnic origin, or health and sex life including genetic data) unless a legal provision permits it or the Agência de Protecção de Dados authorises it on one of its listed grounds, such as the data subject's unequivocal, express and written consent.
• Notify the Agência de Protecção de Dados of sensitive-data processing carried out under a legal provision, and carry it out with guarantees of non-discrimination and special security measures.
• Process health and sex-life data, including genetic data, only with the data subject's or their legal representative's unequivocal, express and written consent or the APD's authorisation, unless it is for preventive medicine, medical diagnosis, consented medical care, health-service management, a medical emergency, or the public interest, and only through a health professional bound by professional secrecy.
• Process personal data on suspected illicit activities, criminal offences, contraventions, penalties or security measures only as a public authority acting under a legal provision cleared with the APD's prior opinion or under the APD's own authorisation, and limit processing for police investigation to what a specific prevention or prosecution purpose requires.
• Post clear notice at any location with a video surveillance or electronic monitoring system that identifies people, stating that image or sound is captured and giving the controller's name, address, phone number and email.