71. (1) The MARA may process personal data for the purposes of the functions assigned to it by or under this Act or any other enactment.

(2) Such processing shall go no further than is necessary for the carrying out of those functions.