Personal Data Protection Act 2012 · 2020 Revised Edition · Part 2 · Personal Data Protection Commission and Administration
10. Cooperation agreements
Feedback & supportLast amended by an amending law of 2016.
For the purposes of section 59, a cooperation agreement is an agreement for the purposes of —
facilitating cooperation between the Commission and another regulatory authority in the performance of their respective functions in so far as those functions relate to data protection; and
avoiding duplication of activities by the Commission and another regulatory authority, being activities involving the enforcement of data protection laws.
A cooperation agreement may include provisions —
to enable the Commission and the other regulatory authority to provide to each other information in their respective possession if the information is required by the other for the purpose of performance by it of any of its functions;
to provide such other assistance to each other as will facilitate the performance by the other of any of its functions; and
to enable the Commission and the other regulatory authority to forbear to perform any of their respective functions in relation to a matter in circumstances where it is satisfied that the other is performing functions in relation to that matter.
The Commission must not provide any information to a foreign data protection body pursuant to a cooperation agreement unless it requires of, and obtains from, that body an undertaking in writing by it that it will comply with terms specified in that requirement, including terms that correspond to the provisions of any written law concerning the disclosure of that information by the Commission.
Commission
“Commission” means the person designated as the Personal Data Protection Commission under section 5 to be responsible for the administration of this Act;
The Commission may give an undertaking to a foreign data protection body that it will comply with terms specified in a requirement made of the Commission by the foreign data protection body to give such an undertaking where —
those terms correspond to the provisions of any law in force in the country or territory in which the foreign data protection body is established, being provisions which concern the disclosure by the foreign data protection body of the information mentioned in paragraph (b); and
compliance with the requirement is a condition imposed by the foreign data protection body for providing information in its possession to the Commission pursuant to a cooperation agreement.
In this section —
“foreign data protection body” means a body in whom there are vested functions under the law of another country or territory with respect to the enforcement or the administration of provisions of law of that country or territory concerning data protection;
“regulatory authority” includes the Commission and any foreign data protection body.