To promote the protection of personal information processed by public
and private bodies; to introduce certain conditions so as to establish
minimum requirements for the processing of personal information; to
provide for the establishment of an Information Regulator to exercise
certain powers and to perform certain duties and functions in terms of
this Act and the Promotion of Access to Information Act, 2000; to provide
for the issuing of codes of conduct; to provide for the rights of persons
regarding unsolicited electronic communications and automated decision
making; to regulate the flow of personal information across the
borders of the Republic; and to provide for matters connected therewith.