The new guidance complements the earlier guidance released in 2017, which was produced by the Working Party Article 29. While the earlier version had a general character, the new guidance is released with the objective of helping controllers to manage collected data and established parameters to be considered in the conduction of risk management.