Skip to content
In force2020 Revised Edition

Part 4 · Collection, Use and Disclosure of Personal Data

13. Consent required

Feedback & support

An organisation must not, on or after 2 July 2014, collect, use or disclose personal data about an individual unless —

(a)

the individual gives, or is deemed to have given, his or her consent under this Act to the collection, use or disclosure, as the case may be; or

(b)

the collection, use or disclosure (as the case may be) without the individual’s consent is required or authorised under this Act or any other written law.

Report

Part 5

Access to and Correction of Personal Data

Part 6

Care of Personal Data

Part 6A

Notification of Data Breaches

Part 7

Part 8

Part 9

Do Not Call Registry

Part 9A

Dictionary Attacks and Address‑Harvesting Software

Part 9B

Offences Affecting Personal Data and Anonymised Information

Part 9C

Enforcement

Part 9D

Appeals

Part 10

General

Schedules