Please see policies and procedures PCD010 Data Protection & Access Policy