Section 20

Any person validly acting on behalf of an individual m relation to the exercise of the individual's rights under this Order may-

27

{a} give, or be deemed to have given, any consent for the collection, use or disclosure of the individual's personal data under this Order;

(bJ withdraw any consent given, or deemed to have been given, for the collection, use or disclosure of the individual's personal data under this

Order;

(cJ make any request for access to the individual's personal data under section 18;

(dJ make any request for correction of the individual's personal data under section 19; or

(eJ make such other request or take such other action as may be prescribed in relation to the individual's personal data.

PART6

CARE OF PERSONAL DATA