An individual shall be able to address a challenge concerning compliance with the above principles to the
designated individual or individuals accountable for the organization’s privacy compliance.