Article 24.2 : Implementation of appropriate data protection policies