Password must be 8-20 characters and include at least three of the following :
Personal Data Protection Act (PDPA) Statement