Data Protection (Amendment) Act 2003
|
Short title, collective citation, construction and commencement. |
23.—(1) This Act may be cited as the Data Protection (Amendment) Act 2003. | |
(2) This Act and the Principal Act may be cited together as the Data Protection Acts 1988 and 2003 and shall be construed together as one. | ||
(3) Subject to the subsequent provisions of this section, this Act shall come into operation on such day or days as, by order or orders made by the Minister under this section, may be fixed therefor either generally or with reference to any particular purpose or provision and different days may be so fixed for different purposes and different provisions including the application of section 22 (1) to different provisions specified therein. | ||
(4) This Act, in so far as it— | ||
(a) amends section 2 of the Principal Act and applies it to manual data, and | ||
(b) inserts sections 2A and 2B into that Act, | ||
comes into operation on 24 October 2007 in respect of manual data held in relevant filing systems on the passing of this Act. | ||
(5) Notwithstanding subsection (4), a data controller shall, if so requested in writing by a data subject when making a request under section 4 of the Principal Act— | ||
(a) rectify, erase, block or destroy any data relating to him or her which are incomplete or inaccurate, or | ||
(b) cease holding manual data relating to him or her in a way incompatible with the legitimate purposes pursued by the data controller. |