PERSONAL DATA PROTECTION ACT 2010 Section 8: Subject to section 39, no personal data shall, without the consent of the data subject, be disclosed—