There is a point of contact (person or role) to whom privacy issues could be reported, even in an ad-hoc manner.
Context and Guidance: Do you have a commonly acknowledged place to report perceived or real privacy issues? Is there an overall senior role accountable for coordinating the resolution of privacy issues?