All staff should be confident in understanding and executing the company's policies and procedures with respect to privacy, confidentiality and data protection.