Recommendation 1 Strengthen and professionalize the position and function of the Avg coordinator. Recommendation 2 Increase the maturity level of the entire privacy organization. Recommendation 3 Increase the quality of DPIAs and registrations in the register of processing activities. Recommendation 4 Establish privacy policies and clear privacy and legal frameworks. Recommendation 5 Improve security and risk awareness when exchanging data with external parties.