Not following the Data Privacy Act can lead to big fines and even jail time. The National Privacy Commission is in charge of checking that everyone follows the rules and looking into privacy breaches.