Data protection for civil society: A guide to the Protection of Personal Information Act