principles: publication of internal compliance regulations and assignment of roles and responsibilities at each organisation, in order to identify new forms of processing or changes in existing forms and to ensure compliance with established requirements.