Article 3 of the Personal Data Protection Act provides that handling personal data by natural persons is subject to the provisions of the law. Companies are legal persons, and their account data are not personal data, and therefore handling of such data is not subject to the provisions of this law.