Section 77

The Data Controller or the Data Processor, whose operation

in relation to Personal Data violates or fails to comply with the provisions of this Act which
causes damages to the data subject, shall compensate the data subject for such damages, regardless
of whether such operation is performed intentionally or negligently, except where the Data Controller
or the Data Processor can prove that such operation was a result of:

(1) a force majeure, or the data subject’s own act or omission to act;

(2) an action taken in compliance with an order of a government official

exercising its duties and power under the law;

The compensation under paragraph one includes all necessary expenses incurred

by the data subject for the prevention of the damages likely to occur,
or which was spent to suppress the damages occurred.