Parliament Advances Bill to Regulate Personal Data Protection and Privacy Rights

The Maldivian Parliament has unanimously accepted and forwarded a government-sponsored bill aimed at regulating the collection, processing, and use of personal data to a standing committee for further review. Introduced by Henveiru West Parliamentarian Ali Ibrahim on behalf of the government, the Personal Data Protection Bill seeks to establish a comprehensive legal framework to strengthen privacy safeguards across the Maldives. The legislation defines the rights of individuals whose data is collected and outlines the strict responsibilities of organizations and entities handling personal information. Central to the bill is the creation of regulatory mechanisms to oversee data controllers and processors. This includes setting clear rules for the transfer of personal data to foreign countries, international organizations, and other cross-border entities, ensuring that Maldivian data remains protected even when leaving the country's jurisdiction. To ensure enforcement, the bill proposes the appointment of a Privacy Commissioner. In a move to streamline governance, the legislation suggests that the Information Commissioner, currently appointed under the Right to Information Act, should also assume the role of Privacy Commissioner. The proposed law also emphasizes accountability. It mandates specific record-keeping requirements for data processors and details the mandatory procedures for managing and responding to data breaches. Furthermore, the bill identifies specific circumstances under which organizations must appoint dedicated Data Protection Officers (DPOs) to maintain compliance. The bill received overwhelming support during the session, with all 66 members present voting in favor of its acceptance. It has now been referred to the Parliament's Information and Communication Committee, which will conduct a detailed review before the bill returns to the floor for a final vote.