The Regulation affords more data rights to individuals and requires organizations to develop defined policies, procedures and to adopt relevant technical and organizational controls to protect personal data.Organizations dealing with high volumes of sensitive data may also face internal risks, such as employee negligence or unauthorized access. The