# L5 - Operations and Maintenance

To know more about this phase of the DPI lifecycle, click [here](../../../life-cycle-stages#conception-and-scoping-l1)

**Click on any process listed below to learn about illustrative practices that can be implemented.**

| Process                                                                                                                                                                                                  | Principle                                                                                                                         | Risks                                                                                                                          |
| -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------ |
| [F4.14 Oversee the publication of reports on user complaints and inclusion metrics.](../../processes/f4.14-oversee-the-publication-of-reports-on-user-complaints-and-inclusion-metrics)                  | [F4 Reinforce transparency and accountability](../../principles/foundational-principles/f4-reinforce-transparency-accountability) | [RS4 Lack of recourse](../../risks/risks-to-safety), [SV3 Weak institutions](../../risks/risks-to-structural-vulnerabilities)  |
| [F9.10 Set a normative framework for public-private partnership to implement DPI frameworks](../../processes/f9.10-set-a-normative-framework-for-public-private-partnership-to-implement-dpi-frameworks) | [F9 Focus on future sustainability](../../principles/foundational-principles/f9-focus-on-future-sustainability)                   | [SV2 Weak rule of law](../../risks/risks-to-structural-vulnerabilities)                                                        |
| [O3.29 Audit data processed against the specified purpose that is being served](../../processes/o3.29-audit-data-processed-against-the-specified-purpose-being-served)                                   | [O3 Ensure data privacy by design](../../principles/operational-principles/o3-ensure-data-privacy-by-design)                      | [RS2 Digital insecurity](../../risks/risks-to-safety), [RS1 Privacy vulnerability](../../risks/risks-to-safety)                |
| [O3.21 Establish mechanisms to ensure a right to opt-out whenever appropriate](../../processes/o3.21-establish-mechanisms-to-ensure-a-right-to-opt-out-whenever-appropriate)                             | [O3 Ensure data privacy by design](../../principles/operational-principles/o3-ensure-data-privacy-by-design)                      | [RI4 Disempowerment](../../risks/risks-to-inclusion), [SV2 Weak rule of law](../../risks/risks-to-structural-vulnerabilities)  |
| [O3.3 Analyze stakeholder interests and implement approprate safeguards](../../processes/o3.3-analyse-stakeholder-interests-and-implement-appropriate-safeguards)                                        | [O3 Ensure data privacy by design](../../principles/operational-principles/o3-ensure-data-privacy-by-design)                      | [RS1 Privacy vulnerability](../../risks/risks-to-safety)                                                                       |
| [O3.5 Enable third-party audits](../../processes/o3.5-enable-third-party-audits)                                                                                                                         | [O3 Ensure data privacy by design](../../principles/operational-principles/o3-ensure-data-privacy-by-design)                      | [RS1 Privacy vulnerability](../../risks/risks-to-safety)                                                                       |
| [O4.9 Mandate security audits by third parties](../../processes/o4.9-mandate-security-audits-by-third-parties)                                                                                           | [O4 Assure data security by design](../../principles/operational-principles/o4-assure-data-security-by-design)                    | [RS2 Digital insecurity,](../../risks/risks-to-safety) [SV1 Digital distrust](../../risks/risks-to-structural-vulnerabilities) |

