29. The sixth standard

29.—

1. The sixth standard is that personal data shall be processed in accordance with the rights of data subjects under this Act.

2. A person shall be regarded as contravening the sixth standard only if the person—

(a) contravenes section 6 by failing to supply information in accordance with that section;

(b) contravenes section 10 by processing personal data for purposes or direct marketing without the consent required under subsection (1) of that section;

(c) contravenes section 11 by failing to comply with a notice given under subsection (1) of that section to the extent that the notice is justified, or by failing to give a written statement under subsection (4) of that section; or

(d) contravenes section 12 by failing to comply with a notice given under subsection (2) or (3)(b) of that section or by failing to give the information as required under subsection (3)(a) of that section or a written statement under subsection (4) of that section.