How does Altium manage and protect the Personal Identifiable Information (PII)?

What measures and policies do you have in place to ensure and demonstrate compliance with good data management principles (i.e. GDPR)?

Do you have a data protection officer (DPO) or a representative responsible for GDPR compliance?