NDPR requires organizations to obtain individuals' consent before collecting their personal data, to have security measures in place to protect personal data, to only collect and use personal data for specified purposes, and to provide individuals with access to their personal data and the ability to request corrections or deletions.