
Figure 1.0
The design of the question-answer model.

Figure 2.0
Legal summarisation component of the tool.

Figure 3.0
a) Chatbot’s welcome message on the website; b) Chatbot’s home screen.

Figure 4.0
Occupation of respondent.

Figure 5.0
Department/Field working.

Figure 6.0
Work experience in years.

Figure 7.0
Situations involving processing of personal data.

Figure 8.0
Awareness of the existence of data protection laws in the country.

Figure 9.0
Extent of Businesses/Organizations’ priorities towards data protection and privacy.

Figure 10.0
Organisation’s level of compliance with data protection laws.

Figure 11.0
Challenges faced by organisations regarding compliance with data protection law.
Table 1.0
Measures reported to ensure data protection compliance.
| What measures does your business/organisation currently have in place to ensure data protection compliance? |
|---|
| R1 Implementation of an Information Security Management System based on ISO 27011:2013 |
| R2 Awareness creation through reviews of the data protection laws |
| R3 All data is centralized |
| R4 None |
| R5 Regulations to access data |
| R6 We have taken measures |
| R7 Planned training staff on data protection laws |
| R8 At the moment, I can’t state since I am not in the management. Management has also not addressed us directly on data protection compliance |
| R9 Occasional departmental sensitisation through memos and brochures |
| R10 Data protection policy enactment on our applications. and also adhering to the GDPR standards |
| R11 Training and capacity building |
| R12 Not aware |
| R13 More training and mainstreaming data protection in firm operations |

Figure 12.0
Challenges faced in understanding and implementing data protection laws.

Code Extract 1.0
Conversational retrieval QA chain
