Key components of our program include a principles-based policy supported by an infrastructure of procedures, job aids, training and other materials governing the collection and use of personal information.