Mechanisms exist to: ? Make data privacy notice(s) available to individuals upon first interacting with an organization and subsequently as necessary; ? Ensure that data privacy notices are clear and easy-to-understand, expressing information about Personal Data (PD) processing in plain language that meets all legal obligations; ? Define the scope of PD processing activities, including the geographic locations and third-party recipients that process the PD within the scope of the data privacy notice; ? Content of the privacy notice is periodically reviewed and updates made as necessary; and ? Retain prior versions of the privacy notice, in accordance with data retention requirements.