Legal Register
ACT-7(a) Tranche 3 (13 May 2027) — Core Operating Cliff
Status: scheduled, not yet operative
Section 7(a): Qualifying use under s7
Receipt requested by principal may qualify; notice-only or third-person data alone does not establish facts.
Statutory Trigger
Qualifying use under s7
Applies to: Data Fiduciary
Substantive Conditions
Specified purpose; principal voluntarily supplied her data; no indication of non-consent.
Statutory Exceptions
Must satisfy s4 and other applicable obligations; this clause is not blanket immunity.
Official Gazette Text (Verbatim Publication)
Ministry of Law and Justice publication, Digital Personal Data Protection Act, 2023.
(a) for the specified purpose for which the Data Principal has voluntarily
provided her personal data to the Data Fiduciary, and in respect of which she has not
indicated to the Data Fiduciary that she does not consent to the use of her personal
data.
Illustrations.
(I) X, an individual, makes a purchase at Y, a pharmacy. She voluntarily provides Y her
personal data and requests Y to acknowledge receipt of the payment made for the purchase
by sending a message to her mobile phone. Y may process the personal data of X for the
purpose of sending the receipt.
(II) X, an individual, electronically messages Y, a real estate broker, requesting Y to
help identify a suitable rented accommodation for her and shares her personal data for this
purpose. Y may process her personal data to identify and intimate to her the details of
accommodation available on rent. Subsequently, X informs Y that X no longer needs help
from Y. Y shall cease to process the personal data of X;