Toll Authority Data Privacy Policy
PRIVACY NOTICE
INTRODUCTION
The Toll Authority (the “Authority”) respects the right to privacy of all users, stakeholders, and members of the public, and is committed to safeguarding personal data in its possession.
This Privacy Notice outlines how the Authority collects, uses, stores, and protects personal data in accordance with the Data Protection Act, 2020, and defines the following:
- The personal data collected in the course of carrying out our regulatory functions.
- The manner in which personal data is collected, used, shared, stored, and otherwise processed.
- Security measures implemented to protect personal data.
- The rights of individuals regarding their personal data.
- How individuals may contact the Authority regarding their data.
1. Information We Collect
The Authority may collect personal data that can identify individuals interacting with our services or website, including:
- Contact and Identity Information: Name, address, telephone number, and email address.
- Regulatory Data: Information provided by concessionaires, including toll usage and compliance data.
- Technical Data: IP address, browser type, and website usage information.
- Supporting Documentation: Government-issued identification or documents required for applications or proceedings.
2. How We Use Your Information
Personal data is used strictly for fulfilling the Authority’s legal and regulatory responsibilities under the Toll Roads Act.
- Monitoring compliance of toll road concessionaires.
- Responding to public inquiries, complaints, and appeals.
- Processing applications and providing service-related updates.
- Ensuring compliance with applicable laws and regulations.
3. Disclosure of Information
All personal data is treated as confidential. Information is only disclosed where necessary and permitted by law.
- To investigate complaints or breaches involving concessionaires.
- To government authorities or law enforcement where required.
- With the consent of the individual.
4. Data Security
The Authority implements appropriate technical and administrative safeguards to protect personal data from unauthorized access, loss, or misuse.
5. Your Rights
Individuals have rights under the Data Protection Act, including:
- Access to personal data held about them.
- Correction of inaccurate or incomplete data.
- Request for deletion where applicable.
- Objection to processing of personal data.
6. Contact Information
For questions or to exercise your rights, please contact:
Data Protection Officer Email: [email protected]

