Data privacy

OC5 protects the Organization; OC11 protects the person. The framework: oc11 as the internal law, the office-of-data-privacy as the centre of expertise, the data-protection-commission as independent supervisor, and dpia as the procedure that puts privacy analysis before deployment.