Draft a IHR Policy

[catsieseo]

This will be broken into:

• Data controller responsibility
• Disclosure
• Data retention
• Secondary data usage

And ultimately... data ownership(?)