The law will be applicable to all kinds of personal data, without making sub-categories such as sensitive personal data and critical personal data