Section 27
Not To Process Sensitive Information
(1) A public body shall not process, or cause to be processed, any sensitive personal information remained under its responsibility or control.
(2) For the purposes of sub-section (1), the following information shall be deemed to be sensitive information of the concerned person:
(a) His or her caste, ethnicity or origin,
(b) Political affiliation,
(c) Religious faith or belief,
(d) Physical or mental health or condition,
(e) Sexual orientation or event relating to sexual life,
(f) Details relating to property.
(3) Notwithstanding anything contained in sub-section (2), such information may be processed in the following circumstances:
(a) In the course of alleviation of disease, public health protection, disease identification, health treatment, management of health institution and providing health service by the licensed doctor in the concerned subject or by the health worker under direction of the licensed doctor, without insulting or letting the concerned person feel inferior.
(b) If the concerned person has published the information himself or herself.
(2) For the purposes of sub-section (1), the following information shall be deemed to be sensitive information of the concerned person:
(a) His or her caste, ethnicity or origin,
(b) Political affiliation,
(c) Religious faith or belief,
(d) Physical or mental health or condition,
(e) Sexual orientation or event relating to sexual life,
(f) Details relating to property.
(3) Notwithstanding anything contained in sub-section (2), such information may be processed in the following circumstances:
(a) In the course of alleviation of disease, public health protection, disease identification, health treatment, management of health institution and providing health service by the licensed doctor in the concerned subject or by the health worker under direction of the licensed doctor, without insulting or letting the concerned person feel inferior.
(b) If the concerned person has published the information himself or herself.