Salesforce's Data Security Framework is the necessary framework that organizations seek to maintain both their internal data privacy and their compliance with various regulatory standards such as GDPR (General Data Protection Regulation), HIPAA (Health Insurance Portability and Accountability Act), and CCPA (California Consumer Privacy Act). Since a data breach can seriously affect the financial and reputational status of a business, the industry also requires the use of a sophisticated and adaptive model of data security. In this respect, Salesforce's security architecture has been designed by taking into consideration the assignment of each level of access, defined and enforced based on a business and legal need.