Sends commercial email, in Zambia

Data Protection Act, 2021, ss. 58-61, 63-67 (rights of the data subject) · Read the law's page

• Let a data subject access, correct, delete, or restrict the personal data held about them.
• Answer an access request with the purpose, the categories of data and of recipients, the storage period or the criteria that set it, the data and its source, and the basic logic of any automated decision-making, free of charge for the first copy and in a commonly used electronic format where the request came electronically.
• Tell the data subject every third party their personal data has been disclosed to, and what safeguards are in place for it.
• Stop processing personal data for direct marketing as soon as the data subject objects, and bring the rights of objection to their attention clearly and separately at your first communication with them.
• Communicate every rectification, erasure or restriction of processing to each recipient the personal data was disclosed to, where practicable.
• Give a data subject their personal data in a structured, commonly used, machine readable or otherwise legible format, and transmit it directly to another controller where that is technically or otherwise feasible.