The purpose of the law is to establish the legal rules applicable to the processing of personal data with the aim of guaranteeing respect for public freedoms and the fundamental rights and guarantees of natural persons.
The Act establishes the Data Protection Commission, provide for principles for regulation of processing of personal information in order to protect and reconcile the fundamental and competing values of personal information privacy under this Act and sector-specific legislation and other related matters.