Monitoring and enforcement. The organization assigns one or more employees to be responsible for assuring compliance with its stated privacy policies. It also provides procedures for responding to customer complaints, which includes the use of a third party dispute resolution process