With the General Data Protection Regulation ("GDPR") already in force, the implementing law, which has been long due, specifies some of its requirements and utilizes the flexibility provided for certain aspects of the GDPR to be adjusted at national law level.