Amended data-protection provisions take effect this month, introducing stricter requirements for how organizations handle personal data and clearer rights for…