On 18 February 2025, the Personal Data Protection Committee (PDPC) closes its consultation on draft amendments to the Personal Data Protection Act. The proposed changes aim to establish an independent supervision mechanism for personal data protection, as mandated by Constitutional Court Judgment No. 13 of 2011. Provisions include requiring public and designated private entities to appoint data protection officers, setting obligations for incident management and reporting, and clarifying oversight responsibilities for high-risk industries. The amendments outline a six-year transitional period for unifying supervisory authority under the PDPC and introduce administrative procedures for appeals and compliance guidelines.
Original source