In order to minimise potential risk exposure, although to date the Group has demonstrated compliance with the current Privacy Code and other applicable regulations, the Internal Audit & Compliance Department, with the support of the relevant business functions, started in the analysis of the Privacy organisational model, the mapping of data potentially exposed to risk, and the subsequent assessment of any changes to the data processing methods themselves.