5.14 Consumer Privacy and Data Protection 5.14.1 Policy Objectives An effective consumer protection policy seeks to: 1. Ensure that consumers are empowered to make informed decisions at the point of sale; 2. Services offered and acquired are fit-for-purpose; 3. Ensure access to effective redress, including ensuring that online transactions have the same legal status as traditional physical interactions; 4. Ensure that consumer interests and privacy are protected by the regulatory body. The UN Guidelines on Consumer Protection were revised in December 2015 to emphasize importance of enhancing “consumer confidence in electronic commerce by the continued development of transparent and effective consumer protection policies, ensuring a level of protection that is not less than that afforded in other forms of commerce.” Liberia does not have a Consumer Protection Act. Laws protecting consumers are in different legal instruments, for example, the Liberia Telecommunications Authority Act has sections that seek to address the protection of consumers against fraudulent practices. Data Protection Data are important for decision making, research purpose and for other analysis. It can either be personal or non-personal. Data protection is necessary to protect consumer rights and privacy. Liberia’s data protection policy is based on the universal data protection principles. Some of the principles are: 1. Personal data will be processed fairly and lawfully; 2. Personal data will be obtained only for one or more specified and lawful purposes, and will not be further processed in any manner incompatible with their purpose or those purposes; 3. Personal data will be adequate, relevant and not excessive in relation to the purpose or purposes for which they are processed; 4. Personal data will be accurate and where necessary, kept up to date; 5. Personal data processed for any lawful purpose or purposes will not be kept for longer than is necessary for that purpose or those purposes; 6. Appropriate technical and organizational measures will be taken against unauthorized or unlawful processing of personal data and the protection of children; 7. Data collectors will be required to disclose use of personal data to consumers. 8. Collected personal data will be rigorously protected from unauthorized access by any parties 5.14.2 Policy Strategies The scope of the consumer protection policy should include a framework based on: 1. Consumer protection rules that bind service providers and content platforms in furthering the interest of consumers; 2. Access to fair and timely dispute resolution mechanism, preferably outside of the service provider, that offers expedient redress without undue cost or burden to the consumer; 3. A monitoring system that enables the regulator to report on important industry 46