Parliament has accepted and forwarded to committee a government-sponsored bill aimed at regulating the collection, processing and use of personal data while strengthening data protection in the Maldives.
The Personal Data Protection Bill was introduced on behalf of the government by Parliamentarian for Henveiru West constituency Ali Ibrahim.
According to the proposed legislation, the bill seeks to establish a comprehensive legal framework governing the collection, processing and use of personal data in the country. It also outlines the rights of individuals whose data is collected and defines the responsibilities of organisations and entities that collect and process personal information.
The bill proposes the creation of regulatory mechanisms to oversee data controllers and processors and ensure compliance with data protection requirements. It also sets out rules governing the transfer of personal data to foreign countries, international organisations and other cross-border entities.
In addition, the legislation specifies the rights available to data subjects and the procedures through which those rights may be exercised. It further outlines the obligations of data processors in responding to and managing data breaches.
The bill establishes the role and responsibilities of a Privacy Commissioner to oversee the implementation and enforcement of the legislation. Under the proposed framework, the Information Commissioner appointed under the Right to Information Act would also serve as the Privacy Commissioner.
The legislation details the responsibilities, record-keeping requirements and accountability measures applicable to data controllers and processors. It also specifies the circumstances under which organisations would be required to appoint dedicated Data Protection Officers (DPOs).
The bill was unanimously accepted by Parliament, with all 66 members present voting in favour.
It has now been referred to the Parliament's Information and Communication Committee for further review and consideration.