4 Prohibition of processing of personal data.
No personal data shall be processed by any person, except for any specific, clear and lawful purpose.
Sections 4 to 11 are the heart of the Personal Data Protection Act. They can be compared with the charging section of taxation laws ^[facebook.com/r.dublish/what-is-charging-section].
This section makes it unlawful to process personal data unless it's for
- Specific purpose i.e. clearly defined or identified
- Clear purpose i.e. easy to perceive, understand, or interpret
- Lawful purpose