Does the project provide adequate protection of users' rights to privacy?
Relevant legislation and government policy and how this matter has been handled in previous projects should be considered.