Team should need reasonable strategies to protect Personal information from losses, punishment, not authorized availability, revelation, modification, otherwise depletion