Required actions
- Appoint a data protection officer and notify breaches to the Commissioner within 72 hours - Apply the Commissioner's guidelines on data processors and cross-border transfers; the 2024 national AI governance guidelines remain voluntary
