Management approach Our attention to data security and privacy starts with policies governing enterprise-wide controls and practices that are approved either by the Board or our Enterprise Compliance Council, whose membership includes representation from across the business.