Act PDPA 2012
Personal Data Protection Act 2012
An organisation has the same obligation under this Act in respect of personal data processed on its behalf and for its purposes by a data intermediary as if the personal data were processed by the organisation itself.