In compliance with the requirements set by recent European regulations on the protection of personal data and the security of critical infrastructures, we have drawn up specific procedures to assess the impact on the processing of personal data and to notify the relevant Authorities of IT security incidents.