We regularly review and document our internal policies, amend existing privacy policies as necessary, and enforce these policies with our partners and vendors. b) Strict security measures As required by GDPR, Criteo already maintains strict security measures when collecting consumer data from our clients.