Section 30: Processing of personal data for direct marketing
repealed (no longer in force). juris shows the text as it was consolidated; it does not confirm that this is the law in force today. The records juris holds show this law as repealed.
30. Processing of personal data for direct marketing
(1) A person may, at any time, by notice in writing, request a data controller—
(a) to stop; or
D3 – 17 [Issue 5]
Data Protection Act
(b) not to begin,
the processing of personal data in respect of which he is a data subject, for
the purposes of direct marketing.
(2) Where the data controller receives a request under subsection (1) (a),
he shall, as soon as reasonably practicable and in any event not more than
28 days after the request has been received—
(a) where the data are kept only for purposes of direct marketing,
erase the data; and
(b) where the data are kept for direct marketing and other purposes,
stop processing the data for direct marketing.
(3) Where the data controller receives a request under subsection (1) (b),
he—
(a) shall, where the data are kept only for the purpose of direct
marketing, as soon as reasonably practicable and in any event
not more than 28 days after the request has been received,
erase the data; or
(b) shall not, where the data are kept for direct marketing and other
purposes, process the data for direct marketing after the expiry
of 28 days.
(4) The data controller shall notify the data subject in writing of any
action taken under subsections (2) and (3) and, where appropriate, inform
him of the other purposes for which the personal data is being processed.
(5) Where a data controller fails to comply with a notice under subsection (1), the data subject may appeal to the Tribunal.
(6) Where a data controller fails to comply with an order of the Tribunal,
he shall commit an offence.
(S. 30 came into operation on 16 February 2009.)