You have assessed that your assignment/project contains personal data. The next thing you need to decide is who has defined your project. In other words, who has decided what the project should contain and how it should be managed.
Tick the box below that best suits your situation.