On 14 August 2025, the Privacy Protection Bill (Amendment No. 13, formerly No. 14) entered into force. The Bill expands the supervisory powers of the Privacy Protection Authority, which will now have the authority to impose financial sanctions for violations of the Privacy Protection Law. In addition, the Bill establishes the obligation to appoint a privacy protection officer for organisations primarily processing sensitive personal information or the systematic monitoring or tracking of people. Furthermore, the Bill limits the obligation to register digital databases to databases managed by those engaged in information trade. Finally, the Bill introduces a chapter on criminal offences in databases and includes a blanket ban on the processing of illegally collected personal information.
Original source