Taking care of data protection is purposefully aimed at forming part of the organizational culture, and the implementation of this is regularly evaluated.
In addition, the organization has defined clear methods of operation to measure staff attitudes towards data protection (e.g. surveys, tests). The measurement results are interpreted and clear measures are formed based on them.