involved the structure and a timely review of the Group s entire documentation system, in order to document compliance with the requirements of the law in protecting personal data, from the conception and design phase of the processing, deciding the methods, safeguards and limits.