Is the personal information you hold accurate and up-to-date? How do you know Are your current processes and checks sufficient? If required to demonstrate compliance, how would you do it?