This project provides insights on best practices of data governance and ethics for a software development company. This task was carried out while being asked to act in the role of a "Data Protection Officer" (DPO).