To contain a policy on data protection/ privacy – to be completed