Configuring the Data Protection Policy