The Data Protection Act of 2012 establishes a Data Protection Commission, to protect the privacy of the individual and personal data by regulating the processing of personal information, to provide the process to obtain, hold, use or disclose personal information and for related matters.
The purpose of the law is to establish the legal rules applicable to the processing of personal data with the aim of guaranteeing respect for public freedoms and the fundamental rights and guarantees of natural persons.