The new Data Protection Act will come into force on 1 September 2023. In the first newsletter in our series on this topic, we outlined a possible roadmap and step 1 of the implementation. In this second newsletter, we explain how to approach in step 2 the measures with external effects and what to take into account regarding the implementation thereof.