In accordance with the Law on the Protection of Personal Data, the sanctions imposed by the Board due to non-compliance with the obligations that must be implemented by the data controllers who set up and manage the personal data recording system