The most important innovations include stricter consent regulations, extended rights of access for data subjects, new requirements for data erasure, additional requirements for data protection impact assessments, shorter notification periods for data breaches, updated rules for cross-border data transfers, strengthening of consumer rights such as data portability and the prohibition of tying, as well as new regulations on fines and extended tasks for data protection officers.