Legal and compliance risks are related to compliance with internal policies and regulations (e.g. personnel conduct not in line with the company’s ethical values, failure to respect delegated powers), and applicable general laws and regulations (e.g. failure to comply with privacy and data protection legislation).