Under the Act, ‘personal data’ refers to information

Solution

Explanation: The Act defines “personal data” as any data about an individual who is identifiable directly or indirectly through such data. This includes names, contact information, biometrics, or any attribute that can link to a person. Data relating to organizations or entities is not covered. By focusing on individuals, the Act ensures that people’s privacy rights are central. This aligns with global data protection frameworks like the GDPR, emphasizing individual data privacy safeguards.