ABSTRACT

Employee knowledge of the legal and regulatory framework only protects a company against possible sanctions; it also allows employees to better understand the constraints related to their daily activities. Compliance with legal and regulatory frameworks often requires organizational adaptations, as we have already seen in many examples. Compliance rarely affects a single business unit; it touches the entire company. The compliance management process can be summarized in four steps: Let us see this process and its tools in more detail. Above all, it helps to better understand what personal data is collected and used, for what purpose, and whether the data processing is in accordance with the principles of lawfulness. IT or automated data processing is an area that has been strongly impacted by recent regulatory changes, particularly regarding data protection, processing, and archiving.