The Chief of Staff (CoS) has an important role in coordinating the company's work with GDPR compliance, in close collaboration with the Data Protection Officer (DPO) and the Integrity Protection Authority (IMY). The CoS is responsible for ensuring that all processes and systems comply with GDPR, that DPIA is implemented for new projects, and that incidents are handled correctly. This means that the CoS regularly meets with the DPO to discuss risks, measures, and training needs. In the event of incidents or questions regarding the interpretation of GDPR, the CoS may need to contact IMY for guidance or reporting. In Swedish companies, it is important to work transparently and involve all relevant parties in data protection efforts. The CoS should also ensure that there is clear documentation and that lessons learned from incidents are shared within the organization. By working in a structured and collaborative manner, the CoS can create a culture where data protection is a natural part of operations.