Watch this video on YouTube
What should information security management do first to assess the impact of new privacy legislation on an organization?