Individual knowledge processing might be performed by persons, or by private or general public organisations, like businesses or public authorities. Their responsibilities and legal responsibility for specific data processing depend on the position they play within the processing in query. Formally attest your compliance. An AOC (attestation of compliance) is https://www.nathanlabsadvisory.com/security-program-advisory.html