That's exactly it, as well as how it will be protected. For example, how the data has to be stored, who can access the data in the company, how the data has to be signed, I'll say in and out, so to speak, when the data has to be deleted, all of that will be included in that.
On October 3rd, 2017. See this statement in context.