The case questions how data protection rules can operate when the parent Act is admittedly unenforced. It underscores that subordinate legislation cannot survive without statutory ...