Duty LXD-5059
Sends faxes, in the Bahamas
Data Protection Act 2003, application and processing principlessince 3 lines
Data Protection (Privacy of Personal Information) Act, Ch. 324A, Laws of The Bahamas, ss. 1-13 (application and data protection principles) · Read the law's page
- Collect personal data only by means that are lawful and fair, keep it accurate and up to date, and hold it only for the specified purposes it was collected for.
- Give an individual access to personal data held about them within forty days of a written request, and rectify or erase it on request where it breaches the collection principles.
- Stop using an individual's personal data for direct marketing within forty days of their written request.
Data Protection Act 2003, data subject rightssince 5 lines
Data Protection (Privacy of Personal Information) Act, Ch. 324A, Laws of The Bahamas, ss. 8-11 (access, rectification or erasure and direct marketing objection) · Read the law's page
- Tell an individual who makes a written request whether the data you keep include personal data relating to them, supply a copy of the information constituting that data, and explain any terms an average person could not understand without explanation, within the period section 8(1) allows.
- Do not disclose personal data relating to another individual in answering an access request unless that individual has consented, but disclose the data with the identifying particulars omitted where that lets it be disclosed without identifying the other individual.
- If you refuse an access request, notify the individual in writing, give the reasons for the refusal and say that the individual may complain to the Data Protection Commissioner.
- Rectify or, where appropriate, erase personal data within forty days of an individual's written request where you have contravened section 6(1) in keeping it, and notify the individual within the same forty days that you have complied.
- Within forty days of a data subject's written request to stop using data kept for direct marketing, erase the data kept for that purpose or, if it is kept for other purposes too, cease using it for direct marketing, and notify the data subject in writing.