Privacy

Ask about retention and privacy policies: who can access them, and how can we confirm that? How often will that access policy be reviewed? Which primary and secondary person is responsible for confirming access and access lists? The risk of lawsuits could require insurance;nor will the contingency fund be paying for lawsuits brought by privacy violations that could arrive a decade after a violation? Where are the recordings stored, and for how long? Which member and secondary is responsible for reporting the status and size of held recordings, confirm they're being rotated and deleted, and confirm their storage medium is secure and private? Will passwords be rotated, and who is responsible for doing that, and who else is responsible for checking it's been changed in the atrata meetings? Is this an outsourcing thing, and which committee picks the company managing your backed up recordings, and is this the same group which will report on security compliance (advertised and tested randomly) where your likenesses will be stored?

Need more? Storing someone's likeness for any length of time requires a LOT of boxes checked, repeatedly, and this is often too much for most organizations, especially if they need to outsource the tech work. Asking periodically to have tapes remove your likeness and confirm it's removed will swamp an FTE, but suggest everyone do this to confirm their movements and ensure accuracy.

Recommend ALL this not be taken from contingency fund.