The new rules aim to enhance data security and empower users under the 2023 Act
Principals are users, fiduciaries manage data, and consent managers handle approval
Users can access, correct, delete data, and must approve data collection
Fiduciaries must get explicit consent and comply with retention limits and audits
Minors’ and disabled users’ data needs explicit guardian consent for collection
High compliance costs and broad government powers need attention for success