Is the Authority required to comply with the Data Protection Law?

Yes, the Authority is required to comply with the Data Protection Act, and the controls implemented are based on security by design.