Create relevant policies, with Board oversight or equivalent, outlining commitment to prevent, assess and mitigate to the best of their ability the risks to freedom of expression and privacy associated with designing, selling and operating telecommunications technology and telecommunications services.