create legal risk management strategies booklet for privacy policy at your workplace must also include in your strategies for each compliance area: the procedures that need to take place to ensure compliance auditing and inspection regimes requirements for record keeping and acceptable record keeping mechanisms specific roles for personnel in relation to that area of compliance training that may be required for staff new to this role other specific action that must be taken for legal compliance when you might need to seek specialist legal advice