Personal Data Protection Order, 2025 · s 36

Suggest a correction

Tell us what is wrong in this text. We check every suggestion against the official version before we change anything.

What is wrong?Wrong or mistyped wordsWrong structure or numberingWrong title or detailsText that appears twice

What should change, and whyUp to 2,000 characters.The text as it should read (optional)Edit the text above. Up to 20,000 characters.Where you checked it (optional)A link to the official version, if you have one.

The text as we hold it

Open the official text

s 36Directions for non-compliance

(1)

The Authority may, if it is satisfied that an organisation has not complied or is not complying with any provision of Part 3, 4, 5, 6 or 7, give the organisation any direction that the Authority thinks fit in the circumstances to ensure compliance with that provision.

(2)

Without limiting subsection (1), the Authority may, if it thinks fit in the circumstances to ensure compliance with any provision of Part 3, 4, 5, 6 or 7, give an organisation all or any of the following directions -

{a} to stop collecting, using or disclosing personal data m contravention of this Order;

{b) to destroy personal data collected in contravention of this Order;

{c) to comply with any direction of the Authority under section 35(2).