A Policy on Use and Protection of Data that emphasizes the organization’s adherence to the principles of transparency, legitimate purpose and proportionality in processing personal data at each point of the information lifecycle.