Our work included data mapping of all systems processing personal data; enhancing our online Privacy Statement, and Privacy Notices for employees, vendors and more; enhancing our incident response process to include GDPR reporting requirements; and conducting training for our employees.