Data Protection And Privacy Act
Act
(c)
2019
further processing is necessary (i)
for the prevention,
detection,
investigation,
prosecution or punishment for an offence or breach of
law;
(ii) for the enforcement
pecuniary penalty;
of a law which imposes a
(iii) for the enforcement of legislation that concerns
protection of public revenue collection;
(iv) for the conduct of proceedings before any court or
tribunal that have commenced;
(v) for the protection of national security; or
(vi) to prevent or mitigate a serious and imminent threat to
public health or safety or the life or health of the data
subject or another individual;
(e)
the data is used for historical, statistical or research
purposes and the person responsible for the processing
ensures that(i)
the further processing is carried out solely for the
purpose for which the data was collected; and
(ii)
that the data is not published in a form likely to reveal
the identity of the data subject; or
18. Retention of records of personal data.
(1) Subject to subsections (2) and (3), a person who collects
personal data shall not retain the personal data for a period longer
than is necessary to achieve the purpose for which the data is
collected and processed unless-