On 16 December 2022, Resolution 255/2022, expanding the definition of sensitive data under the Personal Data Protection Act to include genetic, ethnic and biometric data and outlining the cybersecurity measures to be implemented for processing such …