Under the stewardship of the Data Protection Officer, reporting under this framework is embedded into governance groups at the highest level of management, comprising legal entity boards of directors and the Data Protection Sub-Committee of the Executive Board, to provide the necessary management oversight.