Authorities must address concerns about the draft Data Protection Act

Ambiguity, inadequate protection for sensitive data, and excessive control.