The general data protection regulation is the culmination of much tougher legislation in this area. Most of the companies established according to Law no. 31/1990 does not have to take special measures to comply with this legislation, but all companies must be diligent in their dealings with data subjects and the national supervisory authority. More needs to be done to raise awareness of the obligations in this area, involving authorities, non...