Processes biometric data, in Eswatini

Data Protection Act, 2022, ss. 22-30 (sensitive personal information) · Read the law's page

• Do not process sensitive personal information, including genetic data, data related to children, data related to offences or criminal sentences, biometric data, or information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, gender, or health or sex life, unless a listed exemption applies.
• Obtain prior parental consent before processing personal information under the parental control exemption, and rely on consent, legal necessity, or Commission authorisation for another listed exemption to the prohibition.
• Where you process a data subject's health or sexual life information under a listed exemption and are not otherwise bound by a confidentiality duty, treat the information as confidential unless required by law or your duties to disclose it.
• Do not supply personal information about a data subject's race, trade union membership, or political affiliation to a third party without the data subject's consent, even where a listed exemption lets you process it.
• Apply to the Eswatini Communications Commission for authorisation before processing sensitive personal information in the public interest, and comply with any conditions the Commission imposes on that authorisation.