We adopt a risk-based approach to qualification: for example, a new supplier involved in handling customer data will be assessed to be high risk on the basis that the protection of our customer’s privacy is a critical priority at Vodafone and therefore – regardless of the individual supplier’s merits – stringent due diligence is required.