ImplementingRegulationPersonalDataProtectionLaw

1- Except for what is stated in Paragraph (3) of Article (10) of the Law, when Processing Personal Data collected from sources other than the Data Subject directly, the Controller shall consider the following: a) Processing is necessary and proportionate to the specified purpose. b) Processing shall not affect the rights and interests of the Data Subject. 2- When Processing Personal Data in accordance with paragraph (2) of Article (10) of the Law, the Controller shall ensure that such data Collection from a publicly available source is lawful. 3- When Processing Personal Data in accordance with paragraph (6) of Article (10) of the Law, the Controller shall consider the provisions of Article (9) of this Regulation regarding Anonymisation.