Should Exist IndexPrivacy risk management should be built into products and servicesOrganizations should identify how data operations can harm people and manage those risks throughout the lifecycle.