The RSI Security site breaks down the ways in some depth, but the procedure in essence goes similar to this: Quite a few rival coverage companies have adhered for the Code. Even though adhering is voluntary, the adherence on the Code can help in demonstrating compliance Along with the GDPR. https://www.nathanlabsadvisory.com/blog/nathan/navigating-data-protection-impact-assessments-dpias-under-gdpr-a-comprehensive-guide/