On 12 September 2022, the Agency of Access to Public Information (AAIP) published the draft proposal for the Personal Data Protection Law and opened a public consultation until 30 September 2022. The draft proposal introduces definitions for personal data and lists the categories of data that would be classified as sensitive data, including genetic, biometric and financial data. Furthermore, the Bill outlines the user's rights, including the right to access, ratify and delete their data and withdraw consent for data collection and processing. Finally, the Bill would introduce data minimization and data protection by design requirements.
Original source