63.2. A public body, except the Lieutenant-Governor, the National Assembly or a person designated by the National Assembly to an office under its jurisdiction, must protect personal information by implementing the measures enacted for that purpose by regulation of the Government.