On 1 February 2021, the Personal Data Protection Regulations 2021 came into effect. The regulations introduce several data protection measures, including the requirement for organisations to respond to individuals' requests for access to and correction of their personal data within 30 days. Organisations are allowed to charge a reasonable fee to cover the cost of processing these requests. Furthermore, organisations intending to collect, use, or disclose personal data have to assess and ensure that these actions do not likely have an adverse impact on individuals. The amendment also specifies the procedures for conducting these assessments. Additionally, the amendment extends rights concerning deceased persons. An appointed representative or the nearest relative of a deceased person has the right to withdraw consent, initiate legal action, or file a complaint on behalf of the deceased.
Original source