1. The nature of operations of the Fund is such that it collects and processes large volumes of personal information of its clients (beneficiaries, and Medical Service Providers). The threat in the Annual Performance Plan was highlighted in the context of the risk of potential breach of personal information. In the event that such personal information is not adequately and safely managed/stored, it might fall into wrong hands and with the potential of being abused/misused.
2. Yes. The Act has proven to be an important safeguard against abuse of personal information. The Fund has developed and is implementing a compliance plan.