white_paper_on_data_protection_in_india_171127_final_v2
You also want an ePaper? Increase the reach of your titles
YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.
4.10 Internati<strong>on</strong>al Practices<br />
European Uni<strong>on</strong><br />
Under the EU GDPR, it appears that Member States shall have the discreti<strong>on</strong> to decide rules<br />
<strong>in</strong> relati<strong>on</strong> to crim<strong>in</strong>al sancti<strong>on</strong>s for <strong>in</strong>fr<strong>in</strong>gements of the EU GDPR. 882<br />
United K<strong>in</strong>gdom<br />
The UK DPA makes it an offence for a pers<strong>on</strong> who either know<strong>in</strong>gly or recklessly without<br />
the c<strong>on</strong>sent of the <strong>data</strong> c<strong>on</strong>troller obta<strong>in</strong>s or discloses pers<strong>on</strong>al <strong>data</strong> or the <strong>in</strong>formati<strong>on</strong><br />
c<strong>on</strong>ta<strong>in</strong>ed <strong>in</strong> the pers<strong>on</strong>al <strong>data</strong>, or procures the disclosure to another pers<strong>on</strong> of the <strong>in</strong>formati<strong>on</strong><br />
c<strong>on</strong>ta<strong>in</strong>ed <strong>in</strong> the pers<strong>on</strong>al <strong>data</strong>. 883<br />
Australia<br />
Under the Privacy Act, a pers<strong>on</strong> commits an offence if pers<strong>on</strong>al <strong>in</strong>formati<strong>on</strong> (that relates to<br />
another <strong>in</strong>dividual) is disclosed to her and such pers<strong>on</strong> subsequently discloses the pers<strong>on</strong>al<br />
<strong>in</strong>formati<strong>on</strong>. 884<br />
Canada<br />
Under PIPEDA 885 , every pers<strong>on</strong> who know<strong>in</strong>gly c<strong>on</strong>travenes, <strong>in</strong>ter alia, Secti<strong>on</strong> 8(8) 886 of the<br />
PIPEDA is guilty of an offence punishable <strong>on</strong> summary c<strong>on</strong>victi<strong>on</strong> and liable to a f<strong>in</strong>e not<br />
exceed<strong>in</strong>g CAD10,000, or an <strong>in</strong>dictable offence and liable to a f<strong>in</strong>e not exceed<strong>in</strong>g<br />
CAD100,000.<br />
South Africa<br />
Under the POPI Act, f<strong>in</strong>e or impris<strong>on</strong>ment (for a period not exceed<strong>in</strong>g 10 years) or both for<br />
certa<strong>in</strong> types of offences 887 and f<strong>in</strong>e or impris<strong>on</strong>ment (for a period not exceed<strong>in</strong>g 12 m<strong>on</strong>ths)<br />
or both for certa<strong>in</strong> other types of violati<strong>on</strong>s 888 of the POPI Act has been prescribed. 889<br />
882 Lucy Ly<strong>on</strong>s, ‗Enforcement and sancti<strong>on</strong>s under the GDPR‘, Taylor Wess<strong>in</strong>g (April 2016) available at:<br />
https://www.taylorwess<strong>in</strong>g.com/global<strong>data</strong>hub/article-enforcement-sancti<strong>on</strong>s-under-gdpr.html, (last accessed 20<br />
October 2017). Please note that as per Article 84, EU GDPR, Member States may lay down rules <strong>on</strong> other<br />
penalties applicable to <strong>in</strong>fr<strong>in</strong>gements of the EU GDPR, especially those <strong>in</strong>fr<strong>in</strong>gements, which are not subject to<br />
adm<strong>in</strong>istrative f<strong>in</strong>es.<br />
883 Secti<strong>on</strong> 55, UK DPA. Per Secti<strong>on</strong> 60 of the UK DPA, a f<strong>in</strong>e capped at a particular amount is prescribed as<br />
penalty.<br />
884 Secti<strong>on</strong> 80Q, Privacy Act. The penalty is 60 penalty units or impris<strong>on</strong>ment for <strong>on</strong>e year or both.<br />
885 Secti<strong>on</strong> 28, PIPEDA.<br />
886 Per Secti<strong>on</strong> 8(8), PIPEDA, an organizati<strong>on</strong> that has pers<strong>on</strong>al <strong>in</strong>formati<strong>on</strong> that is the subject of a request shall<br />
reta<strong>in</strong> the <strong>in</strong>formati<strong>on</strong> for as l<strong>on</strong>g as is necessary to allow the <strong>in</strong>dividual to exhaust any recourse under the<br />
PIPEDA that she may have.<br />
887 For <strong>in</strong>stance, for failure to comply with any enforcement notices (Secti<strong>on</strong> 103, POPI Act) or obstruct<strong>in</strong>g the<br />
functi<strong>on</strong><strong>in</strong>g of the Informati<strong>on</strong> Regulator (Secti<strong>on</strong> 100, POPI Act).<br />
202