The policy establishes enterprisewide minimum standards and processes in areas including: (i) Privacy Notices, Consents and Individual Rights; (ii) Information Security Safeguards; (iii) Third Party Risk Management; (iv) Cross-Border Data Transfers; and (iv) Employee Training.