Which of the following should be your first step when conducting an internal privacy audit focused on identifying cross-border data transfers in cloud environme...