Places automated calls, in Eswatini

Data Protection Act, 2022, ss. 19-20, 44, 51 (rights of data subjects) · Read the law's page

• Confirm free of charge, on request from a data subject who proves their identity, whether you hold personal information about them, and provide it in a reasonable manner, format and prescribed time.
• Give a data subject written reasons where you deny an access request, and let them challenge those reasons.
• Correct, destroy, or delete personal information on a data subject's request within fourteen days where it is inaccurate, irrelevant, excessive, out of date, incomplete, misleading, or unlawfully obtained, and tell anyone the changed information was disclosed to within seven working days of the correction where it affects a decision about the data subject.
• Stop processing a data subject's personal information for direct marketing as soon as they give you notice requiring you to cease or not begin such processing.
• If you operate a whistleblowing system, preserve fairness, proportionality and openness about its scope and purpose, and inform a person implicated in a report as soon as possible of the report's existence and the facts alleged.
• Let a person implicated in a whistleblowing report exercise their rights of access, rectification and deletion, but do not give them access to a third party's personal data without that third party's express written consent.