Communication surveillance can be intrusive and benign, like secretly installing Pegasus malware onto a digital device.

By replicating existing frameworks, the draft Personal Data Protection Act misses out on critical local nuances.