To adopt the amended policy and procedure as part of the work to address new requirements in the field of data protection.