Section 53: Joint and vicarious liability

(1) Where an offence has been committed by a body corporate or firm, the body corporate or firm, as well as principal officers of the body corporate or firm shall be deemed culpable, unless the principal officers prove that –
(a) the offence was committed without their consent or connivance; and
(b) they exercised diligence to prevent the commission of the offence.
(2) A data controller and data processor shall be vicariously liable for the acts or omissions of its agent or employees, in so far as the acts or omissions relate to its business.