∘ Appoint a staff responsible for protecting personal information