48 Privacy governance and oversight As evidenced through our internal policies and supported through three established lines of defense, our businesses strive to effectively manage risks associated with collecting, processing, and retaining personal data pertaining to customers and employees . Our internal privacy policies form the basis on which our processes and controls are built . Specifically, our internal privacy and related policies: • Outline the privacy principles and standards that businesses must observe when collecting, processing, storing, transferring, and/or disclosing personal data . • Document privacy principles regarding transparency, notice, collection and retention, use and disclosure, access, and additional topics . • Establish a Privacy Compliance Office to provide independent risk management oversight of data privacy risk . • Define frontline responsibilities to address the risks created by their business or enterprise function . • Communicate guidance and standards for appropriately responding to data subject requests . The second-line function, Privacy Compliance, as well as frontline privacy functions are independent of one another and report up through their respective senior executives to the Board of Directors . These groups and other privacy stakeholders actively engage with each other and coordinate across Wells Fargo to help manage privacy risk . The front line identifies and controls privacy risks and is responsible for self-assurance monitoring at the business operations level . The second line is responsible for maintaining and publishing policy, providing requirements, developing and deploying certain training, and providing objective credible challenge to the frontline business operations . PRIVACY CENTER The Wells Fargo Privacy Center web portal is a resource for people to make requests to see certain personal data we have about them, or ask us to delete certain data that our businesses located in the U.S. have collected from them, subject to several exceptions and exemptions which are explained in the Privacy Center Important Information (PDF) . More information about the types of data we collect, how we use it, and choices available to individuals, is available here .