Most businesses hold some personal data, for example, personal information about customers or employees. If this data relates to someone who can be identified, you are likely to have important legal responsibilities. The financial consequences and the impact on your reputation if that data is breached can be significant; the exact nature of the penalties depends on the jurisdiction that applies to your business. As with any law, it is important to know how it affects your business, how to comply, and how to incorporate any requirements into your business policies. In addition, data breaches can result in other expenses, such as reimbursement to customers and data recovery costs.