Geco can support data-protection responsibilities through access controls, auditability, data-processing terms, security measures and tools such as DSAR support. The organisation still determines lawful basis, retention and appropriate disclosure.