General policy for the protection of personal data