Security policies focus solely on internal corporate obligations.

An organization increases the number of applications on its server.

An employee stores his personal information on his company laptop.

IDs used to avoid the use of personal data map to personal data in another database.