Cap. 371 Art. 34AData protection.

(1) Credit institutions may, when necessary to safeguard the prevention, investigation and detection of payment fraud, process personal data.

(2) The provision of information to individuals about the processing of personal data, the processing of such personal data and any other processing of personal data for the purposes of this Act and any regulations and, or Rules issued thereunder shall be carried out in accordance with any applicable data protection legislation.

(3) Unless otherwise permitted under other provisions of this Act and under applicable legislation, credit institutions shall only access, process and retain personal data necessary for the provision of their services with the explicit consent of those making use of their services.