The new rules mandate parental consent for children’s data and give the government control of Data Protection Boards.