I need to write a Data Protection Policy for both staff and clients.  Does anyone have a policy I could look at and maybe adopt?