When will the new data protection law come into force?