- Every request for consent from a Data Principal must be accompanied or preceded by an itemized notice, written in clear and simple language, explaining the personal data to be collected and the purpose of its processing.
- If a Data Principal has already given consent before the commencement of this act, the Data Fiduciary must, as soon as possible, provide an itemized notice in clear language describing the collected personal data and the purpose of its processing.
- “Notice” can be a separate document, an electronic format, or be included within the same document seeking personal data, or other form as prescribed.
- Itemized” means presented as a list of individual items.
- The Data Fiduciary must offer the Data Principal the choice to access the information ( notice ) in either English or any language specified in the Eighth Schedule