This survey resulted in: a detailed analysis of the processing of specific types of data (for example, sensitive and legal) and a more punctual formalisation of the outsourcing of this data to third parties, carried out through the system for the appointment of Privacy Managers.