Amending the Data Privacy Act, Part II