To make sure that their systems, algorithms, and procedures do not endanger user rights, these organisations are required to perform an annual audit and a Data Protection Impact Assessment. The ...