Once the measures to make our organization GDPR-ready were implemented, we performed an internal audit with the support of an external auditing firm on each of the operating countries, to test the robustness of their privacy and data protection approach.