Regulator: The Data Protection Commissioner
Summary: The Act establishes data protection principles that provide a comprehensive basis for the collection, processing, and use of personal data. The Act provides for obligations for data controllers, such as data processing notifications and detailed rights of access processes. In addition, the Act established the Data Protection Commissioner ('the Commissioner') and provided it with a wide range of powers, particularly in relation to investigations. The Amendment Act mostly implemented technical changes, however it also introduced privacy impact assessments, the exercise of which may be requested from a government department by the Commissioner, and provided further protections for those who notify the Commissioner of possible violations of the Act.