The Privacy Protection Authority regulates maintenance of databases containing private data and privacy requirements applicable to uses of such data. The privacy protection commissioner has enforcement authority in cases of unauthorised use of data.