We undertook a project on creating a policy document management standard, including an enterprise-wide assessment of compliance obligations under the EU General Data Protection Regulation (GDPR) and other applicable privacy legislation.