On 21 January 2025, the Information and Communication Technology Division opened a consultation on the Personal Data Protection Act, 2025, including data protection regulations. The consultation is open until 28 January 2025. The Act establishes a framework for regulating personal data within the country's borders. The Act mandates lawful, fair, and transparent processing of personal data, emphasizing principles such as purpose limitation, data minimisation, accuracy, storage limitation, and security. The Act mandates consent for data processing, except in cases involving government functions, legal compliance, and specific personal or family matters. Data subjects are granted rights, including access, correction, erasure, and the ability to object to data processing, along with data portability and the right to restrict processing under certain conditions.
Original source