Furthermore, the Chief Privacy Officer oversees a full-time policy and investigations team that not only manages the review and response to any potential privacy incident, but, for any actual incident, uses a protocol that involves processing, tracking, reviewing, making improvements and, when appropriate, retraining or developing a corrective action plan.