No. 3
Data Protection
(2) the authority shall perform its functions and exercise the
powers provided for under this act independent of the direction,
influence or interference of any person or entity.
5.__(1) the authority shall regulate the processing of personal
data as prescribed under this act and oversee the implementation,
and be responsible for the enforcement, of this act.
(2) notwithstanding the generality of subsection (1), the
authority shall—
(a) develop and publish guidelines on data protection to
promote data protection and compliance with this act;
(b) promote public awareness of this act and international
personal data protection legal frameworks;
(c) encourage the development and introduction of personal
data protection technologies and administrative measures, in line
with international standards and applicable international laws;
(d) engage with national, regional and international authorities
responsible for data protection to develop consistent and efficient
approaches to the regulation of cross-border transfer of personal
data;
(e) advise the Minister on policy issues relating to personal
data protection;
(f) collect and publish information with respect to personal data
protection, including personal data breaches;
(g) keep and maintain a register of data controllers of
significant importance and data processors of significant
importance; and
(h) do all such acts and things as are necessary or incidental to
the implementation of this act.
6.
the authority may—
(a) designate a country, region or sector as affording adequate
personal data protection standards for cross-border transfers
pursuant to section 39;
(b) prescribe and approve standard personal data protection
contractual clauses;
(c) issue compliance orders in cases where this act is
contravened; and
(d) do all such acts and things as are necessary or incidental to
the implementation of this act.
7
Functions of
the authority
Powers of the
authority