Article 2: Scope and Objective

These Rules shall be applicable to Controllers that are subject to the application scope of the Personal Data Protection Law and are mandated to register on the Platform in any of the following instances:
1.  If the Controller is a public entity.
2.  If the Controller’s main activity is based on personal data processing and collection.
3.  If the Controller collects and processes sensitive personal data, and the processing is likely to entail a high risk to the rights and freedoms of the personal data subjects, e.g., criminal data, genetic data, or an individual’s racial or ethnic origin.
This aims to establish a unified national register that facilitates enhanced compliance by Controllers with the provisions of the Personal Data Protection Law and the Regulations.