On 12 June 2023, the Data Protection Act, 2023 (Act No. 37), which outlines cybersecurity obligations, entered into force. The Act requires data controllers and processors to implement cybersecurity measures proportionate to the amount and type of p…