The new Data Protection Act will come into force on 1 September 2023. In our October and November newsletters, we outlined the roadmap and preparations, and the required data protection measures with external effect. This third newsletter concludes our three-part series with a focus on the internal data protection measures and their implementation.