Has your organization designated a Privacy Officer (person responsible for personal information)?