The ability to establish privacy principles to ensure an individual's rights to the confidentiality of their personal information. Monitoring compliance with legislation and guidelines. Includes investigating breaches of privacy and evaluating new technology for potential risks to individual privacy.