This policy letter sets forth the general principles that underlie IBM’s specific practices for collecting, using, disclosing, storing, accessing, transferring or otherwise processing personal information.