This Act protects the privacy of the individual and of personal data by regulating the collection and processing of personal information; provides for the rights of the persons whose data is collected and the obligations of data collectors, data processors and data controllers; regulates the use or disclosure of personal information; and provides for related matters.
The Act establishes the Data Protection Commission, provide for principles for regulation of processing of personal information in order to protect and reconcile the fundamental and competing values of personal information privacy under this Act and sector-specific legislation and other related matters.