Watch this video on YouTube
When reviewing privacy considerations, what should the IS auditor FIRST review in terms of data handling?