Companies in scope will have to have to consider the influence on users’ privateness and be certain people understand how organization programs and processes impact person privateness. Such systems can be hacked by reverse engineering the security scheme. However, just before the regulator can use the power it will need to seek approval from Ministers on the basis that adequately correct tools exist.