IR01 | Identifying and managing information risk: Data Protection Advising on and applying privacy by design principles. Identifying data protection risks and advising on mitigations.