Update privacy policy to reflect current data practices and publish. - Clear the backlog of late DSARs and implement tracking to ensure future compliance within one month. - Initiate DPIAs for both high-risk processing activities; suspend automated recruitment scoring and insurance risk profiling un