It is the person in charge of personal data who must ensure that the GDPR is followed within the organization.