ACT NO. OF
2013
DATA PROTECTION ACT, 2013
An Act to establish the Data Protection Commission, provide for principles for regulation of
processing of personal information in order to protect and reconcile the fundamental and
competing values of personal information privacy under this Act and sector-specific legislation
and other related matters.
Enacted by the Parliament of Lesotho
PART I – PRELIMINARY
Citation and Commencement
1
This Act may be cited as the Data Protection Act, 2013 and shall come into operation
on the date of publication in the Gazette.
Interpretation
2
In this Act, unless the context otherwise requires –
“automatic calling machine” means a machine that is able to do automated calls
without human intervention;
“biometric” means a technique of personal identification that is based on physical