Report on data legal requirements and implemented data protection approaches

Summary
Report on data legal requirements and data protection approaches, to be updated in M26. Related tasks: T2.6, T2.2.