New Laws
SOURCE EXPLAINERPersonal information: purpose before collection
A purpose-led reading of the Data Privacy Act’s principles and lawful grounds for processing.
The NPC’s official statutory text was checked for sections 11–13 and 16. This article addresses those provisions only; it does not summarize all later privacy regulations.
What happened
The Data Privacy Act of 2012 established a framework for processing personal information. This is a foundational explainer of the statute, rather than an announcement of a new enactment.
What the law/case says
Section 11 requires transparency, legitimate purpose and proportionality. Section 12 identifies lawful grounds for processing personal information; consent is one ground. Sensitive personal information is governed by the separate restrictions and exceptions in section 13. Section 16 addresses data-subject rights.
Why it matters
Collecting information and having a lawful basis to use it are distinct questions. The purpose of a form, the nature of the information and the permitted use should be considered together.
Practical takeaway
Before collecting information, identify the stated purpose, the relevant legal ground, the information needed and an appropriate retention approach. Security, statutory exceptions and later NPC issuances also require attention; this short reading is not a complete compliance assessment.
Official source/citation
Read the NPC’s official text, particularly sections 11–13 and 16. The date below is the statute’s approval date, not the date of this explainer.