I would just add comments to complement Roch's answer.
We do complete privacy impact assessments for programs that occur within government. That is an overarching.... Anybody who has their hands or fingers on a specific program would be part of that review. That is typically done at the front end of a program.