The regulatory framework provides for the creation of a authority responsible for ensuring data protection