An international regulatory body responsible for setting and enforcing stringent data security and access standards. Possessing the power to audit organizations, impose fines, and require mandatory software updates. Operates on the principle that data security is so vital that certain privacy must be sacrificed.