[22nd December 2023]
REPUBLIC OF SEYCHELLES SUPPLEMENT TO OFFICIAL GAZETTE ACT
DATA PROTECTION ACT, 2023
(Act 24 of 2023)
ARRANGEMENT OF SECTIONS
PART I - PRELIMINARY
Sections
- Short title
- Interpretation
- Application
- Exemptions
PART II - INFORMATION COMMISSION
- Information Commission
- Powers and duties of Commission
- Investigations and audits
- Enforcement notice and corrective powers
- Preliminary injunction
- Disclosure
- Liability
- Powers and duties of Chief Executive Officer
- Right of appeal
- Cooperation
PART III - DATA PROTECTION
- Processing personal data
- Data retention
- Data minimization
- Data quality
- Access, requests and correction of data
- Data security and confidentiality
- Accountability for data processing activities
PART IV - PROCESSING SPECIAL CATEGORIES OF PERSONAL DATA
- Sensitive data
- Data related to minors
- Processing of personal data relating to offences and criminal conviction
[22nd December 2023] Data Protection Act REPUBLIC OF SEYCHELLES SUPPLEMENT TO OFFICIAL GAZETTE ACT
PART V - DATA SUBJECTS RIGHTS
- Rights of data subjects
- Right to be informed
- Right to access data
- Right of rectification or correction
- Right to cancel or delete data
- Right to object the processing of data for a specific purpose
- Right to data portability
- Right to compensation
PART VI - OBLIGATIONS OF DATA CONTROLLERS AND DATA PROCESSORS
- Safe custody
- Transparency
- Privacy by design
- Data processors
- Records of processing activities
- Logging
- Blocking data
- Data protection impact assessment
- Prior consultation
- Security of processing
- Notification of a personal data breach to the Commission
- Communication of a personal data breach to the data subject
- Data protection officer
- Tasks of data protection officer
PART VII - TRANSFER OF DATA TO THIRD PARTIES
- Cross-border data flows
PART VIII - OFFENCES AND PENALTIES
- Unlawful disclosure of personal data
- Obstruction
- Offence for which no penalty provided
- General conditions for imposing administrative fines
[22nd December 2023] Data Protection Act
REPUBLIC OF SEYCHELLES SUPPLEMENT TO OFFICIAL GAZETTE ACT
PART IX - MISCELLANEOUS
- Cooperation with other authorities
- Compliance audit
- Regulations
- Repeal of (Cap 57)
- Transitional Provisions
[22nd December 2023] Data Protection Act REPUBLIC OF SEYCHELLES SUPPLEMENT TO OFFICIAL GAZETTE ACT
DATA PROTECTION ACT, 2023
(Act 24 of 2023)
I assent
Wavel Ramkalawan President
$19^{th}$ December, 2023
AN ACT FOR THE PROTECTION OF INDIVIDUALS WITH REGARD TO THE PROCESSING OF PERSONAL DATA, TO RECOGNISE THE RIGHT TO PRIVACY ENVISAGED IN ARTICLE 20 OF THE CONSTITUTION, TO PROMOTE AND FACILITATE RESPONSIBLE AND TRANSPARENT FLOW OF INFORMATION BY PRIVATE AND PUBLIC ENTITIES AND TO PROVIDE FOR OTHER RELATED MATTERS.
ENACTED by the President and the National Assembly.
PART I - PRELIMINARY
Short title
- This Act may be cited as the Data Protection Act, 2023.
[22nd December 2023] REPUBLIC OF SEYCHELLES Data Protection Act