Personalized info processing may be performed by people today, or by non-public or community organisations, like corporations or community authorities. Their obligations and liability for particular details processing count on the function which they Participate in in the processing in question. Formally attest your compliance. An AOC (attestation of compliance) https://www.nathanlabsadvisory.com/spear-phising.html