Problem
1. Identify and discuss 1 privacy right law from somewhere in the world.
2. Does an organization have a "due care" responsibility to protect the privacy data?
3. What actions can the organization take to show "due diligence" in protecting the PII data?