On 5 May 2025, the Personal Data Protection Bill (S-0644/2025) was introduced to the Senate. The Bill would establish the Personal Data Protection Authority as an autonomous and financially independent body. The Authority would be responsible for supervising compliance with the law, conducting investigations, issuing warnings and reprimands, imposing administrative fines, and ordering the suspension or prohibition of processing activities in breach of the law. It would also be tasked with promoting public awareness, handling complaints, maintaining a public register of data processing activities, and issuing recommendations to the national government on matters concerning personal data protection.
Original source