This implies an exposure to the risks connected with the protection of personal data, an issue that must also take account of the substantial growth in privacy legislation, whose inappropriate implementation can cause economic or financial losses and reputational harm.