REGULATION ON PROCEDURES AND PRINCIPLES REGARDING THE DETERMINATION, USE AND PROTECTION OF USER PASSWORDS