Article (11) The Controller shall take the following procedures: 1. Reviewing privacy protection measures before proceeding with new processing operations. 2. Identifying Processors responsible for Personal Data protection. 3. Training and raising awareness of Processors on protecting personal data. 4. Developing internal systems to receive and investigate complaints, and data access and omission or correction requests; and they shall be made available to individuals. 5. Developing internal systems for the effective management of Personal Data, and reporting any breach of measures aiming at the protection thereof. 6. Using appropriate technologies to enable individuals to exercise their rights to directly access, review and correct their respective Personal Data. 7. Conducting comprehensive audits and reviews on the compliance extent with Personal Data protection requirements. 8. Verifying Processor’s compliance with the instructions directed thereto, taking the appropriate precautions to protect Personal Data, and monitoring and following-up the same constantly. This document is not official and the official version of the law is the one published in the Official Gazette number 15 of year 2016 that is available on almeezan.qa