The Data Protection Bill, which seeks to establish a legal framework for the collection, processing and use of personal data in the Maldives, has been accepted by Parliament and referred to the Parliament's Committee on Information and Communication Technology for further review.

The bill was submitted on behalf of the Government by West Henveiru MP Ali Ibrahim. It was approved following its first reading and debate in Parliament, receiving the unanimous support of all 66 MPs present.

The proposed legislation would establish a comprehensive framework for the collection, processing and use of personal data. It also defines the rights of individuals whose personal data is processed, outlines the responsibilities of organisations handling such information, and sets out the regulatory framework for ensuring compliance.

The bill also establishes rules governing the transfer of personal data to foreign countries, international organisations and other cross-border entities. In addition, it specifies the rights of data subjects and the procedures organisations must follow in the event of a data breach.

The legislation further proposes the appointment of a Privacy Commissioner to oversee the implementation and enforcement of the law. Under the bill, the Information Commissioner appointed under the Right to Information Act would also serve as the Privacy Commissioner.

The proposed law also details the responsibilities of data controllers and data processors, including record-keeping requirements and the circumstances under which organisations would be required to appoint Data Protection Officers.