A company's new project requires processing and storing personal data collected from multiple countries. To ensure compliance with diverse international privacy regulations, what should be the first priority for the Chief Information Security Officer (CISO)?