Prior internal audit for verifying compliance with current legislation, and proposal of corrective measures. Drafting of the mandatory security document and other steps required for the lawful gathering of personal data. Recording and modification of private files with personal data in the General Register of Spain’s Data Protection Agency [Registro General de la Agencia Española de Protección de Datos] and the corresponding agencies of the autonomous communities or regions for files of a public nature. Audits on the protection of data in documentary or automated files with medium and high levels of security.