We have, for example, documented our personal data processing, implemented required actions to IT systems and other registers, trained employees, and established processes to manage new obligations such as the identifying and reporting of personal data breach incidents and fulfilling the requests of data subjects.