New rules operationalizing the Digital Personal Data Protection law are now in effect, granting citizens control over their digital data and requiring verifiable parental consent for onboarding children. Companies face penalties for violations and must promptly report data breaches, with an 18-month transition window provided.