... defined as having worked as either a project manager or lead research analyst for a minimum of 2 years ... Privacy Practices and Privacy Policies and Procedures as well as all data security guidelines established ...