(1) A public body shall not process or cause to be processed any sensitive personal information under its charge or control.
(2) For the purposes of sub-section (1), the following information shall be deemed to be sensitive personal information of the person concerned:-
(a) his race, caste or origin,
(b) Political Affiliation,
(c) religious faith or belief,
(d) physical or mental health or condition,
(e) sexual orientation or sex life incident,
(f) Details relating to assets.
(3) Notwithstanding anything contained in sub-section (2), such information may be processed in the following cases:-
(a) in the course of providing health care, public health protection, disease identification, health treatment, management of health institutions and health services, without insulting or disrespecting the concerned person under his/her instructions, (b) If the information has been made public by the concerned person.