Complete the Privacy Impact Assessment
Plan
Analyze – identify and assess specific risks
Mitigate – Create privacy protective measures for potential risks identified
Report – Record due process for future audits and reviews