Unchecked Power Over Personal Data

The Minister can unilaterally declare any class of information "critical" based on undefined criteria like "economic and social well-being"—potentially capturing databases containing vast amounts of personal data (health records, financial information, communications) with no data protection safeguards. Once designated, 51 would impose registration and compliance obligations that could include mandatory government access to personal information without necessity analysis, proportionality assessment, or independent oversight. This violates core data protection principles: there are no limits on scope, no procedural fairness, no data subject rights protections, and no requirement for data protection impact assessments before designation.