It is an internal responsibility of each company, and must be linked to the management of the systems. The entry into force of the European Data Protection Regulation, together with Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights, makes it a requirement.
This is not only about avoiding a leak or reducing a loss, but about complying with the rule and, in many cases, reducing the possibility of criminal allegations against the legal entity.
