An information security manager has been made aware of a new data protection regulation that will soon go into effect. Which of the following is the BEST way to...