Develop a Data Protection Culture and Mitigate Risks