TAGs: Privacy officer requirements