Any company regardless of its type and size must train its employees in data protection. It must do this to comply with the requirements of the EU General Data Protection Regulation (GDPR), which stipulate that companies must have verifiable data protection measures in place.