Legal Register
ACT-32 Tranche 3 (13 May 2027) — Core Operating Cliff
Status: scheduled, not yet operative
Section 32: During s28 proceeding
No universal immunity from signing a remediation plan.
Regulated Actor: Board; person giving undertaking
Gazette Baseline: Lines 809–824
Statutory Trigger
During s28 proceeding
Applies to: Board; person giving undertaking
Substantive Conditions
Voluntary action/abstention/publicity undertaking; consensual variation; bar on proceedings as to contents.
Statutory Exceptions
Breach of accepted term is deemed breach; hearing then s33 route.
Official Gazette Text (Verbatim Publication)
Ministry of Law and Justice publication, Digital Personal Data Protection Act, 2023.
Voluntary 32. (1) The Board may accept a voluntary undertaking in respect of any matter related
undertaking. to observance of the provisions of this Act from any person at any stage of a proceeding
under section 28.
(2) The voluntary undertaking referred to in sub-section (1) may include an
undertaking to take such action within such time as may be determined by the Board, or
refrain from taking such action, and or publicising such undertaking.
(3) The Board may, after accepting the voluntary undertaking and with the consent of
the person who gave the voluntary undertaking vary the terms included in the voluntary
undertaking.
(4) The acceptance of the voluntary undertaking by the Board shall constitute a bar
on proceedings under the provisions of this Act as regards the contents of the voluntary
undertaking, except in cases covered by sub-section (5).
(5) Where a person fails to adhere to any term of the voluntary undertaking accepted
by the Board, such breach shall be deemed to be breach of the provisions of this Act and
the Board may, after giving such person an opportunity of being heard, proceed in accordance
with the provisions of section 33.
Mapped Operational Controls (1)
Enterprise obligations in the Control Master Matrix grounded in this statutory provision.