Section 29
Obligations of data processor of public agency
of Personal Data Protection Order, 2025
ORDERIn forceProvision 29 of 49
Section 29
Where an organisation-
{a) is a data processor processing personal data on behalf of and for the purposes of a public agency; and
{b) has reason to believe that a data breach has occurred in relation to that personal data, the organisation shall, without undue delay, notify the public agency of the occurrence of the data breach.
OFFENCES AFFECTING PERSONAL DATA AND
ANONYMISED INFORMATION