Amending the Data Privacy Act