Data Protection (Amendment) Act 2003

Amendment of section 17 (applications for registration) of Principal Act.

17.—Section 17 of the Principal Act is amended—

(a)  in subsection (1)—

(i)  by the substitution of the following paragraph for paragraph (b):

“(b) Where a data controller intends to keep personal data for two or more related purposes, he or she shall make an application for registration in respect of those purposes and, subject to the provisions of this Act, entries shall be made in the register in accordance with any such application,”,

and

(ii) by the insertion of the following paragraph after paragraph (b):

“(c) Where a data controller intends to keep personal data for two or more unrelated purposes, he shall make an application for separate registration in respect of each of those purposes and, subject to the provisions of this Act, entries shall be made in the register in accordance with each such application.”,

and

(b)  by the substitution of the following subsection for subsection (3):

“(3) The Commissioner shall not accept such an application for registration as aforesaid from a data controller who keeps sensitive personal data unless he or she is of opinion that appropriate safeguards for the protection of the privacy of the data subjects are being, and will continue to be, provided by him or her.”.