If I had to collect and assess the quality and appropriateness of data held by a large, multi-national organization. What steps should I take? How would I address network, security, and ethical considerations when deciding what data to collect from the company?