Human Resource professionals should take part in a company’s data security process, making sure that goals are realized and that messaging is fully comprehended. When employers take “reasonable measures” to protect workers’ personal information, the danger of company liability is lessened. Employers may want to include ethics training and establish a corporate code of conduct that requires employees to report questionable practices. Companies should be sure employees are protected from retaliation for reporting wrongdoing.