Act
Data Protection And Privacy Act
2019
( 6) A data controller shall not use subsection (4) as an excu se for
failing to commun icate so much of the information sought that may
be communicated without the disclosure of the identity of the
individual concerned.
(7) The data controller may make the communication under
subsection (6) by omitting or deleting the name or other identifying
particulars of the other individual.
(8) For the purposes of subsection (4), to determine whether it is
reasonable to comply with the request without the consent of the
other individual concerned, the data controller shall take into
account(a)
any duty of confidentiality owed to the other individual ;
(b) any steps taken by the data controller to seek the consent of
that other individual;
(c) whether the other individual is capable of giving consent ;
and
(d) any express refusal of consent by the other individual.
(9) Subject to subsection (4) , a data controller shall comply with
a request under this section promptly and in any event within thirty
days from the date of receipt of the request.
25. Right to prevent processing of personal data.
(1) A data subject shall at any time by notice in writing to a data
controller or data processor, require the data controller or data
processor to stop processing personal data which causes or is likely to
cause unwarranted substantial damage or distress to the data subject.
(2) A data controller shall within fourteen days after receipt of a
notice inform the data subject in writing that the data controller has
complied or intends to comply with the notice of the data subject, or
of the reasons for non-compliance .