An organization will be impacted by a new data privacy regulation due to the location of its production facilities. What action should the risk practitioner tak...