Actions taken in recent years have served to establish personal data governance, to create and formalise the associated processes, to respond diligently to the exercise of the rights of policyholders, and to make people working in the Group aware of the need to protect personal data.