On 16 October 2012, the Data Protection Act 2012 (Act 843) entered into force. The Act establishes the Data Protection Commission (DPC), tasked with protecting individual privacy and regulating the processing of personal data. The DPC is governed by a Board, which includes a chairperson, representatives from various governmental and regulatory bodies, and an Executive Director appointed by the President. The DPC's primary functions include implementing and monitoring compliance with the Act, investigating complaints, maintaining the Data Protection Register, and promoting public awareness of data protection rights and obligations. The Board is responsible for ensuring the effective performance of the DPC's duties, with members appointed for a maximum of three years, renewable for one additional term. The DPC is funded through parliamentary allocations, donations, grants, and other approved sources, and is required to submit annual reports to the Minister and Parliament.
Original source