The RSI security blog breaks down the actions in certain detail, but the process in essence goes like this: Several rival insurance policy companies have adhered for the Code. Though adhering is voluntary, the adherence to your Code allows in demonstrating compliance With all the GDPR. Immediate API SAQ D https://www.nathanlabsadvisory.com/eu-us-privacy-shield-gdpr.html