The Protection of Privacy Act (POPA) is the legislative framework by which public bodies may collect, use, or disclose personal information and requires the protection of personal information held by public bodies. As well as allows public bodies to create, use and disclose non-personal data in limited circumstances.