2011-02-23 | 24083Added · Updated
The Act establishes the Office of the Information Commissioner and appoints an Information Commissioner with powers to monitor compliance, conduct audits, and order the cessation of data collection practices that violate the law. It defines personal and sensitive personal information, imposing General Privacy Principles on organizations and public bodies regarding data collection, consent, accuracy, and security. The legislation grants individuals the right to access their data, challenge its accuracy, and receive timely engagement from organizations handling their information. It also regulates the cross-border disclosure of personal information, requiring comparable safeguards in the receiving jurisdiction.