Summary should include
users’ personal information
developers’ measures to protect users.
Process/Skill Questions:
Who is responsible for protecting personal information?
Who is responsible for user safety?