Development and implementation of an Enterprise-wide Directive to ensure Personal Data Protection ()