On 15 November 2013, the Personal Data Protection Act 2010 (Act 709) entered into force. The Act applies to anyone who processes or controls the processing of personal data in commercial transactions, a so-called data user. The Act specifies exempti…
Source