ACT NO. OF 2013 DATA PROTECTION ACT, 2013 An Act to establish the Data Protection Commission, provide for principles for regulation of processing of personal information in order to protect and reconcile the fundamental and competing values of personal information privacy under this Act and sector-specific legislation and other related matters. Enacted by the Parliament of Lesotho PART I – PRELIMINARY Citation and Commencement 1 This Act may be cited as the Data Protection Act, 2013 and shall come into operation on the date of publication in the Gazette. Interpretation 2 In this Act, unless the context otherwise requires – “automatic calling machine” means a machine that is able to do automated calls without human intervention; “biometric” means a technique of personal identification that is based on physical