VAccording to the proposal, social media providers will be required to clearly inform users about the personal data they collect when users install and use their services. These platforms must not collect unauthorized data beyond what is explicitly agreed upon with customers. A key provision in the draft law states that organizations and individuals providing social media and online communication services will not be allowed to request users to upload photos of their national ID card or passport as a method of account verification. Additionally, social media platforms must provide users with the option to decline cookie tracking and data sharing. They will be required to offer a "Do Not Track" feature, ensuring that user activity on social media and OTT services is only monitored with explicit consent. Providers must also issue clear, written notifications regarding the sharing of personal data and implement security measures when using customer data for advertising and marketing purposes.