The Protection of Personal Information act created the requirement for businesses to deal with and protect personal information in a specific and prudent way.
Non-compliance and data breaches will result in significant fines, reputational damage and in extreme cases the act allows for imprisonment of directors. Organisations have wrestled with how to implement the intent of the act in a practical way which does not unduly hamper the day-to-day running of the business.