Investment in IT security systems Customer privacy and data protection Potential risk linked to deficiencies in the system for protecting customers’ personal data and information Non-compliance with regulatory requirements on data privacy may lead to monetary sanctions.