Statements outlining an organization's commitment to protecting personal information and data security.