The Commissioner focuses also on this point if he’s looking for a suitable software. We now come to the main point of the documentation of the process: the flow of data – who gets what data from the data set (receiver) and where did the data (data collected at). Who can not see these facts as DSB, is can not properly classify the sensitivity of a data protection mechanism. A good data protection software will however cover this point. Privacy documentation need typically have a longer time, until they are properly (i.e. fully) constructed. The Department provides requested information more slowly than quickly; multiple request after is normal.