18. Offences

18.—

1. A data controller who processes personal data to which section 15(1) applies, without complying with section 16, commits an offence. Register. Offences.

2. It shall be a defence for a person charged with an offence under subsection (1) to show that the person exercised all due diligence to comply with section 16, and the standard of proof shall be on the balance of probabilities.

3. A person who commits an offence under subsection (1) shall be liable upon summary conviction before a Parish Court, to a fine not exceeding two million dollars or to imprisonment for a term not exceeding six months.