9.6 Anti-Doping Organizations shall regularly assess their Processing of Sensitive Personal Information and whereabouts information to determine the proportionality and risks of their Processing and to assess any measures, including privacy by design measures, that could be taken to reduce the risks for the Participants  concerned.