Acceptance of controls?

• Minimum legal requirements?

• Best practice?

• Negotiated position?

Previous slide

Next slide

Back to first slide

View graphic version

Assuming there is a consensus that the position needs to be clarified.

But is there also a consensus that policies should be negotiated that go beyond the bare legal minimum? Best practice in IR & Privacy?