Assume that you have been assigned to a system development project team that is creating a complex customer-facing information system. The system is intended for legitimate purposes, but you realize that the level of personal and financial data the system will capture about customers could easily be put to uses well beyond the legitimate purposes of the intended system. What are a few of the policy, procedural, or technical controls you might try to include in the system in order to increase customer confidence that their information will be protected and will not be put to uses beyond those for which it was collected?