https://blog.clausehound.com/blog-bite-whos-responsible-for-employee-privacy-breaches/