S.L. 626.1 Art. 8Data protection.  Cap. 586.

(1) Nothing in these regulations shall prejudice the applicability of Regulation (EU) 2016/679, the provisions of the Data

Protection Act and the regulations made thereunder, and the fundamental rights and freedoms of the data subjects.

(2) The Authority acting in its capacity of a controller in accordance with the provisions of Article 4(7) of Regulation (EU) 2016/679, shall perform the relevant data processing operations which are limited to the extent necessary and proportionate to the objectives pursued by the Authority.

(3) The processing of personal data for the purposes of these regulations shall fully comply with the principles relating to the processing of personal data pursuant to Article 5 of Regulation (EU) 2016/679.