Able to monitor and assess regularly and in a timely manner business compliance with data privacy