Data Protection Principles: Guidelines on how personal data should be processed, stored, and shared. Data Subject Rights: Provisions ensuring patients can access, correct, and delete their data. Security Measures: Requirements for technical and organizational measures to protect data. Liability and Redress: Clauses outlining the responsibilities and liabilities of each party in case of data breaches or non-compliance.