Data protection principles such as purpose limitation, data minimization, and accuracy. Obligations on the data importer to implement appropriate security measures. Rights of the data subjects, including the right to access, rectify, and delete their data. Mechanisms for redress and enforcement of these rights.