The French Data Protection Supervisory Authority (CNIL) has published a model by which organizations can assess their own level of data protection management and improve and develop it accordingly. The so-called “Model” describes 8 typical activities related to data protection at 5 levels of development.

The criteria used in the preparation of the model are in line with international standards in the field of personal data protection. As a result, organizations can develop an action plan to follow.

Here you may read more information on the topic: https://iapp.org/news/a/cnil-publishes-data-protection-management-maturity-model/.