The People’s Majlis has accepted the Personal Data Protection Bill and forwarded it to the Parliament’s Information and Communication Technology Committee for further review. Introduced on behalf of the government by PNC Member for the Henveiru West constituency, Ali Ibrahim, the bill was accepted unanimously with 66 votes from the 67 members present at today’s sitting.

The primary objective of the legislation is to establish a robust legal framework to regulate the collection, processing, and utilization of personal data in the Maldives. It defines the specific rights of data subjects, as well as the legal obligations and regulatory standards for data collectors and processors.

Additionally, the bill outlines guidelines for transferring personal data to foreign nations, international organizations, and other cross-border entities. It defines how individuals can exercise their data rights and mandates clear protocols for processors to follow in the event of a data breach.

To ensure effective enforcement, the bill establishes the role of a Privacy Commissioner, detailing their specific powers and responsibilities. According to the bill, the Information Commissioner, appointed under the Right to Information Act, will assume the role of the Privacy Commissioner.

The legislation also details the roles, responsibilities, and record-keeping requirements for data controllers and processors, specifying the exact conditions under which they must appoint dedicated Data Protection Officers (DPOs).