New rules clarifying what telecommunications operators, internet service providers and other public electronic communications service providers are required to do should a personal data breach occur came into force on 25 August 2013.