Data protection policy
Principles and rules, set by a government or organisation, for collecting, storing and sharing personal data lawfully.
Covers government and organisational policy statements and internal rules on personal data; binding legislation is Data protection regulation.