A company has started developing a privacy program. The Data Protection Officer (DPO) has been working long hours to develop cohesive procedures and processes; however, he failed to fully document…

A company has started developing a privacy program. The Data Protection Officer (DPO) has been working long hours to develop cohesive procedures and processes; however, he failed to fully document each aspect of the data retention process. Which level from the Privacy Maturity Model most closely describes the company?