Data Protection Act

29. Duty to notify

Edition: 2022-12-31 · In force

A data controller or data processor shall, before collecting personal data, in so far as practicable, inform the data subject of—

(a)the rights of data subject specified under section 26;

(b)the fact that personal data is being collected;

(c)the purpose for which the personal data is being collected;

(d)the third parties whose personal data has been or will be transferred to, including details of safeguards adopted;

(e)the contacts of the data controller or data processor and on whether any other entity may receive the collected personal data;

(f)a description of the technical and organizational security measures taken to ensure the integrity and confidentiality of the data;

(g)the data being collected pursuant to any law and whether such collection is voluntary or mandatory; and

(h)the consequences if any, where the data subject fails to provide all or any part of the requested data.