General policy regarding the protection of personal data