The government has submitted a legislative proposal to Parliament to establish a systematic legal framework for the collection, processing, and utilisation of personal data, a move intended to formalise digital privacy standards. The Data Protection Bill was presented to the legislative body on behalf of the government by Ali Ibrahim, the Member of Parliament for West Henveyru.
Should the legislation be enacted, it would create a stringent regulatory framework detailing the fundamental rights of individuals regarding their personal information, alongside the rigorous responsibilities and guidelines imposed upon entities that handle such data. Addressing the complexities of the modern digital landscape, the bill defines protocols for transferring personal information across borders, including to foreign nations and international organisations.
The bill outlines the specific rights granted to data subjects and the mechanisms through which they can be exercised, while establishing mandatory procedural responses for entities in the event of a security breach. To ensure enforcement, the bill designates a Privacy Commissioner. Under the draft provisions, the sitting Information Commissioner, initially appointed under the Right to Information Act, will assume the role and duties of the Privacy Commissioner.
The text further delineates the distinct record-keeping mandates required of both data controllers and processors. It identifies specific operational circumstances under which these entities will be legally obligated to appoint designated data protection officers to ensure ongoing institutional compliance with the law.