REGULATION ON PROCEDURES AND PRINCIPLES FOR DATA PROTECTION IMPACT ASSESSMENT