Compliance with these obligations requires Mandatum Life to conduct a thorough assess ment of the risks that the processing of personal data poses to the data subjects, for example when planning operations that involve processing sensitive data.