On 1 January 2031, the Law on Personal Data Protection enters into force. Under Article 41 of the "Implementing Regulations of the Law on Personal Data Protection" (adopted 31 December 2025), small businesses have until 5 years from the effective da…