The purpose of this law is to protect the rights of individuals in the processing of personal data.
The Act establishes the Data Protection Commission, provide for principles for regulation of processing of personal information in order to protect and reconcile the fundamental and competing values of personal information privacy under this Act and sector-specific legislation and other related matters.