"e existing standards are absent or deemed inadequate, this should be documented along with any proposed solutions or remedies); Policies for access and sharing including provisions for appropriate protection of privacy, confidentiality, security, intellectual property, or other rights or requirements;" . . . . . . .