The rules include provisions related to all new elements introduced by the Regulation, especially those related to the conduction of Data Protection Impact Assessments, personal data breaches, requirements for considering privacy by design and by default and the protection of data subjects’ rights.