On 9 March 2023, an Act relating to the regulation of third-party data collection entities was introduced. It contains registration requirements for said businesses. Descriptions of the data processed, contact information, and proof that the data collected is limited and for the intended purpose should be provided with the registration statement. Additionally, businesses are required to outline their minor data collection protocol and provide a log of their security breaches.
Original source