HR plays a critical role in spreading the gospel of data privacy. First, of course, HR is a repository for private employee information. It also needs to coordinate training for all employees, so they understand what information requires protection and how to recognize ways in which malicious actors use social engineering to gain access to it. 

Download this report from The JHRS Knowledgebase under the "HR Special Interest Subjects" sub-folder. (Requires Professional Level access.)