In addition, it is the responsibility of the data protection officer (DPO) to ensure that legal requirements on data protection are complied with, in order to protect the parties concerned, such as customers and employees, from data misuse.