Report suspected privacy incidents as soon as possible through the organization’s privacy incident reporting system or by promptly reporting to the Privacy Office directly.