So companies have now realized that they need to have trust with their customers? That they need to protect their customers data? And that someone in the company should be concerned about it?

This seems more like corporate CYA than anything else. “well we did hire a trust officer and trust officers are trustworthy.”