Revised Laws of Saint Lucia (2022)

41.   Use of personal data

A data controller shall ensure that personal data is —

  1.  

    (a)     kept only for one or more specified and lawful purposes for which the personal data is to be processed;

  1.  

    (b)     not used or disclosed in any manner incompatible with the purposes for which the personal data has been processed;

  1.  

    (c)     adequate and relevant for the purpose for which the personal data is to be processed; and

  1.  

    (d)     not kept for longer than is necessary for the purpose for which the personal data is to be processed.