Personal Data Protection (Amendment) Bill

The Personal Data Protection (Amendment) Bill aims to amend the existing Personal Data Protection Act 2012 to enhance regulations surrounding personal data management. The key points of the bill are as follows:

• It introduces enhanced accountability measures for organizations handling personal data, emphasizing the need for responsible data management and security practices.
• The bill specifies new provisions for data breach notifications, establishing protocols for organizations to handle and report significant data breaches expeditiously.
• New concepts of "derived personal data," "user activity data," and "user-provided data" are defined to clarify categories of personal data and the circumstances of their collection and use.
• There are provisions for data portability, allowing individuals to request the transfer of their personal data between organizations, promoting consumer autonomy over personal information.
• Strengthened enforcement powers for the Personal Data Protection Commission are included, enabling the imposition of heavier fines and penalties for non-compliance with the Act.