All data controllers must ensure that their employees process personal data only in accordance with data protection requirements. In order to fulfil this obligation, they should make their colleagues aware of their obligations under data protection law. This should be done through regular training and awareness-raising measures.
