Keep informed, for a start! And keep a watching brief on changing regulations, as well as ensuring that their own cross-functional leadership team (technology, security, legal, HR and risk officers) are providing strong guidance and direction on data management and protection – what tools and systems they recommend to keep data safe and business adhering to regulation.