In order to showcase real compliance, one needs to analyse the privacy maturity of an organization and create a sustainable framework be it the ISO 27701 or a customized one built specifically for the organization