Managing a global privacy program - how to do it?