The country’s first data protection legislation is also hanging fire since there are no subordinate rules to implement the piece of legislation