Sanction guidelines for privacy and security violations.