Applicable statutory, legal or best practice requirements The policy aligns with legal and best practice requirements, including the Data Protection Act 2018 and GDPR for handling personal data, and ...