Compliance by the ERG Group firstly focused on all of the more substantial aspects of the new regulation: those relating to Privacy by Design (internal risk assessment, internal policies, etc.) and to Privacy by Default (data protection by default to meet Regulation requirements and protect data subjects’ rights), without neglecting formal aspects such as the updating of both internal and external documentation.