3. Record of Processing Activities
·Inventory of each processing activity
·Legitimation and Consent
·Review forms to adapt them to the GDPR
·Drafting the Registry of Processing Activities
·Review security measures (previous security document oriented to risks)