Personalized data could also be processed if processing is necessary for compliance using a lawful obligation to which the data controller is matter (Write-up 6(2) of your Act). Therefore, it is anticipated the Act will be amended to be able to confront the problems, challenges, and implications