2. Databases used for HR management and planning contain a wide variety of personal and sensitive data that require the organization to set security, privacy, and usage policies. What legislative and ethical requirements of data security need to be considered?