Without a DPA there’s just so much that law can’t define, and that interpretation is bound to differ widely between different ministries. Even for very simple things, like what is "informed consent", or very simple things like does this belong to sensitive personal info, non-sensitive personal info, or not personal info at all, different ministries have different standards.