The Law on Personal Data Protection, passed by the National Assembly on 26/6, stipulates that administrative fines for buying or selling personal data can be up to 10 times the illegal proceeds.