Finally, add to the list which measures are used to protect the respective data.
- Who has access to the data and under what conditions?
- Are there access authorisations, password rules, multi-factor authentication or other measures that increase the security of personal data?
- Is the data encrypted?