These working groups guide the key changes at TIM introduced by the GDPR, including those relating to: processing registers (to document all personal data processing carried out by TIM), privacy impact assessment (for personal data processing with a high "Privacy” risk), data breaches (covering all types of personal data), rights of those concerned (following the introduction of the new right to be forgotten and right to personal data portability), as well as the Data Protection Officer (mandatory position for TIM, whose role is to facilitate compliance with the GDPR provisions for senior management, which is required to ensure and demonstrate compliance with the provisions on the basis of the accountability principle).