On 24 August 2009, the Protection of Personal Information Bill (B9-2009) was introduced to the National Assembly. The Bill requires entities to obtain consent for the processing of personal information, enabling justifications such as contractual performance, legal obligations and legitimate interests of the data subject. Data subjects can withdraw consent and have the right to access, correct and delete their data, among others.
Original source