When you set out to design and implement a data privacy compliance program for a company or other organization, you face a number of threshold decisions and preparatory tasks, including putting a person or team in charge of data privacy law compliance.

Someone needs to be in charge. If your business is a one-person sole proprietorship, then you are in charge. In larger organizations, however, there are typically a number of individual candidates or departments that could take charge of data privacy compliance, including lawyers, information technology staff, human resources and internal audit personnel. Each of these groups tends to have a different approach, strengths and limitations. Here are some factors to consider as you look for the right person or team: