To protect individuals' privacy, PICs are required to establish policies that govern CCTV operations, including procedures for handling data breach incidents. PICs and PIPs are also mandated to ...