DATA PROTECTION AND PRIVACY ACT