retention periods reviewed, efficient communication especially with debtors and use of encryption discussed, data privacy agreements reviewed, vendor agreements regulated by safe harbour framework updated due to the Schrems II verdict.