INFORMATION SECURITY AND PERSONAL DATA FRAMEWORK POLICY