Some compliance requirements need an as-extensive-as-possible processing of personal data. However, data protection law requires to limit the collection of personal information to what is directly relevant and necessary to accomplish a specified purpose. In addition, some companies are required by (wanted) certificates to create management systems. These systems are operated group-wide and integrated. The data protection organisation should be involved with these management systems in order to eliminate contradictions and to create synergy. Data protection is therefore a cross-section between various fields.