General Policy on Personal Data Protection and Privacy