Suppliers are to commit to protecting the reasonable privacy expectations of personal information of everyone they do business with; including suppliers, customers, consumers and employees. Suppliers comply with privacy and information security laws and regulatory requirements when personal information is collected, stored, processed, transmitted, and shared.