MBP must approve the published privacy policy, including data retention and inquiry handling, before launch.