Act No. 3 of 2024

Complete enacted Act No. 3 of 2024: all 53 sections, ten Parts, arrangement and enactment records, preserved by CYRILLA. Presidential assent was 31 January 2024, publication was 2 February 2024, and Government Notice 40 separately appoints 3 June 2024 as commencement. This cross-cutting law covers personal, health, biometric and research data, including impact assessments, controller–processor contracts and international transfers referenced by KUREC templates. It does not establish medical-device market approval procedures. Section 41(3) requires a decision on significant controller/processor registration within fourteen days; section 41(6) requires written notification within ninety days after registration information changes. These periods, breach notifications, data-subject responses and original transitional periods are not device-modification approval deadlines. All thirty original page images and complete text are retained, including the original Major/Significant Importance heading difference, extraneous marginal Complaints on page 24 and penalty of make good in section 45(5). The DPA catalogue links the Act, but its actual download timed out; this preservation copy has not been compared with that unreceived file. Three currently linked 2025 regulations are expressly drafts, and the July 2026 fee notice concerns proposed fees. This original expression is not a verified current consolidation. Later amendments, enacted regulations, prescribed forms/fees, orders and current applicability remain under review; excluded from default current-law discovery.

Act No. 3 of 2024 is the official identifier Parliament uses for this instrument. Always confirm the current consolidated text and transition provisions with the official source before filing.