National legal and institutional framework implementing European data protection rules, defining supervisory authorities, enforcement procedures, national derogations, and sector-specific data processing obligations.