On 1 January 2028, the Act relating to consumer data privacy and online surveillance enters into force. The Act applies to businesses that control or process the personal data of over 35’000 consumers annually. It establishes a data protection frame…