Be proactive with privacy risks Governance, culture and training,have a robust privacy and security governance arrangements in place including training,resources and documented policies and procedures. Robust ICT security. Who has access to IT security and Privacy by design.