Managing personal data is done by people.
The culture within your business, the attitude towards data protection and privacy, will determine just how successful you will be in your attempts to manage the problem.
Your leadership, your attitude to upholding the rights and freedoms of those involved, your appetite for risk, the way your business responds when an incident occurs – indeed if it even notices and reports the incident at all – all reflect your privacy culture.
As a business owner or manager it is you who sets the tone for the privacy culture. It is you who creates the conditions for that culture to be a positive one, working for the benefit of all concerned. it is you who provides adequate resources to make sure the culture can actually work. Training, systems, understanding and know-how all depend on the privacy culture you create and maintain.