The PDPA applies to organisations, but not to individuals acting in their personal or domestic capacities.

There are existing laws that protect individuals from harassment and related anti-social behaviour through civil remedies and/or criminal sanctions. 

Examples

• If you are being harassed or intimidated by an individual who has access to your personal data and is acting in his or her personal capacity.
• If an individual acting in his capacity as an employee accesses the organisation’s computer system without authorisation.