Employers cannot overlook compliance of data privacy laws.  As more employers adopt enterprise-level information management systems and outsource certain human resources administration functions, increasing amounts of personal data is being transferred and shared within and between organizations. Employers should consider all legal requirements (whether local, state or provincial or nationwide) that may impact their data privacy policies and procedures. Companies seeking to minimize their exposure from legal violations and security breaches involving employee Personal Data should consider adopting data privacy and protection best practices that aim to limit the amount of Personal Data they collect, process, transfer and store; secure Personal Data collected (in all formats in which it is kept); limit access to Personal Data to the extent practical, and provide training to staff who handle Personal Data; ensure third parties receiving Personal Data are subject to and apply appropriate security measures.