The participants in the module are able to set up the privacy policy and compliance policy in such a way that and to assess whether the conditions in this regard are met. The controller will also have to adapt its information policy to the GDPR and record the evidence in such a way that it can demonstrate that it complies with the GDPR.