The law adds multiple constraints to data management, such as asking users for explicit authorization for the use of their data and requiring companies to remove this data after a period of three years without interaction.
Sheria hii imeongeza matakwa kadhaa kuhusu utunzaji wa taarifa ikiwamo kupata ridhaa isiyo na shaka ya mtumiaji kuhusu taarifa zake na kuyataka makampuni husika kuondoa taarifa hizi baada ya kipindi cha miaka mitatu bila kushurutishwa.