Data protection and data management policy