This includes a data protection organization that ensures that relevant laws and internal directives are adhered to. Effectiveness and results The effectiveness of the compliance management system is reviewed regularly and the necessary modifications are made.