This brings together our Data Code of Conduct, which sets out core principles for responsible data management, with our IT security, privacy and social media policies, and our security standards (which are based on ISO 27001).