In addition, it is the responsibility of the data protection officer (DPO) to ensure that legal requirements on data protection are complied with, in order to protect the subjects, such as customers and employees, from data misuse.