It takes culture as well as individual and corporate responsibilities to ensure workforce data privacy and compliance.