you need to look at your settings policy and procedure on this and the legal requirements, do they meet them and if not how should they? do you think the p and p is sufficient does it meet the requirements of the law. describe how your setting handles data and info
|