Summary

Classifies regulated entities (Ultra-High, Extra-High and other levels) by volume and sensitivity of data processed, and sets registration obligations with the Commission for those of major importance — including financial institutions, telecoms and large health-sector controllers.

Applicability

Data controllers/processors meeting major-importance thresholds.