To establish a data protection culture within an organization, data protection must be conceptualized within the organization's governance. This may include policies and procedures within departments responsible for data processing, such as human resources, information technology, and finance, as well as relationships with external stakeholders who interact with personal data.

This module discusses necessary organizational structures and the need for a data protection officer.