The Past
Enterprises collected data about private individuals and enterprises alike often without the parties knowledge or consent. This information was not available nor open to question by the concerned party.
Enterprises could use technical means to collect data about people or enterprises ( for e.g. via Internet web spying software) without any real control or a supervising authority to ensure that the data collected would only be put to good use.
Current
With the introduction of the new data protection law, a register will be maintained by the newly established data protection council. It will be possible for the public to consult this list so as to be aware of which enterprise has what information about them. The law also provides for the possibility for a person or enterprise to request from the person or enterprise holding such data to furnish them with a complete listing of such information kept about them. It will be further possible for the interested party to request that any incorrect data be amemended and that any sensitive data be removed (if not in in relation to the given business relationship).
The new law requires all entities which collect data about people or enterprises to register such databases with the national data protection commission. Sensitive data such as religion, race, illness, union affiliation, etc. need prior approval from the commission before any such data can be collected.
