All businesses have and use a lot of data. Data is also needed for any company’s operations. As data created and stored continues to grow, more data protection strategies are needed. Openness: Organizations must be transparent about their practices in handling personal data.. Collection limitation: Collection of personal data must be limited only to what is needed, lawful, and with full knowledge and consent from the data subject. It helps reduces the chances that the organization suffers breaches Organizations that implement policies and controls reduce the chances of a security incident that may result in privacy breaches. It supports an organization’s code of ethics and values Most organizations have established a code of ethics that serves as a guiding principle for employees.