Compliance with legal requirements and settled case law, the appropriateness of internal guidelines and SOPs for the handling of data, and the effectiveness of the data protection organisation and procedures are evaluated regularly in the OeKB bank group and adapted whenever necessary.