Data Protection Guidelines and Notifications

Summary
Due M24 - draft: M9