Privacy
? Does you system collect personal data?
? Does the user know that you are collecting personal data?
? Who is supposed to have access to that data?
Example: Dartmouth Medical School
? Who actually has access to that data?
Example: Personnel data files
..... the first subpoena ....