It issues data protection requirements, imple­ ments awareness­raising measures (training courses, etc.), monitors compliance and assists in operational design (consulting), as well as reporting to senior management.