Appointment of a Data Protection Officer (required because VitraMed processes health data at scale) - Development of DPIA processes for high-risk processing activities - Staff training across the organization - Establishment of a relationship with an EU supervisory authority (lead authority under th