63.6. The committee may, at any stage of a project referred to in section 63.5, suggest personal information protection measures applicable to the project, such as(1) the appointment of a person to be responsible for implementing the personal information protection measures;
(2) measures to protect the personal information in any document relating to the project, such as specifications or a contract;
(3) a description of the project participants’ responsibilities with regard to the protection of personal information; or
(4) training activities for project participants on the protection of personal information.