S.L. 627.1 Art. 15Processing of personal data. Cap. 586.

(1) Nothing in these regulations shall prejudice the applicability of Regulation (EU) 2016/679 and the Data Protection Act including any regulations made thereunder and the fundamental rights and freedoms of the data subjects.

(2) The Ministry responsible for disability and the development of this sector, acting in its capacity of a controller in terms of Article 4(7) of the Regulation (EU) 2016/679, shall perform the relevant data processing operations which are strictly necessary for the purposes of these regulations.

(3) Where the personal data transferred to the controller by virtue of these regulations includes data other than that required for the purposes of these regulations, the controller shall delete such data immediately and permanently upon receipt.

(4) The processing of personal data for the purposes of these regulations shall comply with the principles relating to the processing of personal data pursuant to Article 5 of Regulation (EU) 2016/679, and said personal data shall not be further processed in a manner that is incompatible with the purposes of these regulations.

(5) The processing of personal data for research and statistical purposes shall be subject to appropriate safeguards pursuant to Regulation (EU) 2016/679, for the rights and freedoms of the data subjects. These safeguards shall ensure that technical and organisational measures are in place in particular to ensure compliance with the principle of data minimisation as set forth in Article 5(1)(c) of Regulation (EU) 2016/679, which measures may include pseudonymisation.