The law, which came into force in February and drew criticism from rights group Amnesty International, expands authorities‘ access to digital data and loosens the legal framework limiting surveillance by law enforcement.