Majlis Committee Seeks Public Feedback on Personal Data Protection Bill

The People’s Majlis’ Information and Communication Technology (ICT) Committee has opened a public consultation on the proposed Personal Data Protection Bill.

The bill, currently under review by the committee, was submitted to Parliament on behalf of the government by West Henveyru MP Ali Ibrahim. It seeks to establish a legal framework governing how personal data is collected, processed, transferred and used by both public and private entities in the Maldives.

advertisement

The Majlis has invited the public and relevant institutions to submit feedback by 2:00 pm on 8 July.

ޒާތީ މަޢުލޫމާތު ރައްކާތެރިކުރުމުގެ ބިލަށް ޢާންމުންގެ ޚިޔާލު ހޯދުމަށް ހުޅުވާލުން

ބިލު ބައްލަވާލެއްވުމަށް:https://t.co/NZBwsdDvu1 pic.twitter.com/USeMNDmpgO— People's Majlis (@mvpeoplesmajlis) June 24, 2026

The current government is moving towards a formal legal regime for digital privacy and digitalising government services, as the government seeks to define how personal data can be collected, processed, transferred and used by public and private entities. The bill proposes a structured framework for the protection of personal information, setting out the rights of individuals as well as the obligations of organisations that handle such data. 

If passed, it would create legal standards for the management of personal data, including the responsibilities of data controllers and processors, while outlining the rights of data subjects and the procedures through which those rights may be exercised.

The proposed law also addresses cross-border data transfers, including the sharing of personal information with foreign countries and international organisations, an area expected to become increasingly important as more services and business operations move online. It further includes provisions requiring action in the event of data breaches and establishes record-keeping obligations for data controllers and processors. 

The bill would designate a Privacy Commissioner to oversee enforcement, with the Information Commissioner initially assuming those responsibilities. It also requires certain organisations to appoint data protection officers, introducing additional compliance requirements for institutions that handle significant amounts of personal data. 

The proposal comes as the Maldives continues to expand digital public services and private sector technology platforms, with the legislation aiming to strengthen privacy safeguards while creating clearer regulatory obligations for businesses and state agencies.