The key provision of this law establishes liability for company officials in case they fail to register personal data base