[Comment to 9.1: Anti-Doping Organizations shall ensure that any access to Personal Information  by their own personnel shall take place on a need- to-know basis only and where consistent with assigned roles and responsibilities.