What are the obligations of the Controller stated in this Decree by Law?   
In addition to the obligations stated in this Decree by Law, the Controller must notify the Bureau of any breach or violation of Personal Data that could harm the privacy, confidentiality, and security of data. 