ICO REVIEW CRITERIA - What questions to ask