THE PERSONAL DATA PROTECTION Code of practice