Overly Strict PDPA: The existing legal framework is deemed complex and restrictive. Crucially, the Bank argues that the current interpretation of the Personal Data Protection Act (PDPA) is