What should a firm do with respect to data storage and security policies to help mitigate misuse or breaches? As a manager making recommendations for system design, where would you store data? How should data be stored? Who should have access to the data, and how would you screen this approval (think about both users and staff associated with the firm and its partners. What about law enforcement)? How should access be determined? Are there effective ways to prevent or limit exact identification of a user?