Organizations must ensure only the right people have access to the right data and that malicious actors don’t gain access to sensitive information.
https://www.securitymagazine.com/articles/99414-89-of-businesses-report-concern-over-new-privacy-regulations
