Personal Data Protection Bill
- The Personal Data Protection Bill introduces a comprehensive framework to regulate the collection, use, and disclosure of personal data by private organizations, balancing individual privacy rights with manageable compliance costs for businesses, particularly SMEs, through a phased implementation and exceptions for certain entities like data intermediaries and public agencies.
- It establishes a Do Not Call (DNC) registry to allow individuals to opt out of unsolicited marketing calls and messages, with specific exclusions for business-to-business communications and certain charitable or public service messages, while imposing obligations on organizations to check the registry and obtain clear consent.
- The bill creates a Personal Data Protection Commission (PDPC) to enforce the law, with powers to issue directions, impose financial penalties up to $1 million, and provide education and outreach, while allowing for appeals and dispute resolution through independent panels and courts.