Understand general privacy principles for sensitive information, Risk Management