The NDPA imposes an active obligation on organisations to have a privacy program in respect of the personal information they process for their business activities. This obligation carries with it a duty to be accountable for the proactive implementation of the privacy program by ensuring compliance with the principles and standards of data protection established under the Law. Examples of how to demonstrate accountability are;