The new rules will introduce mandatory data breach notification for all,
joint and several liability for suppliers (data processors); tougher restrictions on the
use of profiling
and the collection
and use of children's data; enhanced rights for individuals;
and a requirement for most organisations to appoint a data protection officer.