The specificity of the regulations for the protection of personal data consists in the fact that only rights are provided for the subjects of personal data (individuals), and only obligations for the controller (companies, institutions, state authorities, etc.).