The act cannot guarantee personal data will be protected; it can only require it and impose penalties for when protection is inadequate or fails. Also, since data privacy is not data security, data subjects should still take steps to protect themselves. Get familiar with their data privacy rights and try as far as possible to prevent those rights from being violated. Start reading privacy policies.
Pay attention to the information required on forms, including electronic forms used online or by mobile applications. Ask questions: why is this personal information required? What will it be used for? Who will it be disclosed to? Do not give out personal data unnecessarily. Secure their information with appropriate devices and software applications. Most importantly, get professional help or advice if necessary.