An ongoing management issue encompassing the risk of personal information breaches caused by unauthorized access and other incidents, as well as the burden of responding to changes in personal information protection regulations in each jurisdiction and their impact on the business. This includes management and response measures such as establishing policies and procedures, training, and PrivacyMark certification.