නිල පරිවර්තනයවෙනස් නොකළ පාඨය, Department of Government Printing වෙතින්
(1)
Every controller shall, ensure that personal data is processed for a—
(a)
specified;
(b)
explicit; and
(c)
legitimate, purposes and such personal data shall not be further processed in a manner which is incompatible with such purposes.
(2)
Subject to the provisions of section 10 of this Act, further processing of such personal data by a controller for archiving purposes in the public interest, scientific research, historical research or statistical purposes shall not be considered to be incompatible with the initial purposes referred to in paragraphs (a), (b) and (c) of subsection (1).