A policy rules how to deal with Data and Accounts of a person. Policies are usually defined by the affected persons themselves. In special cases, such as dismissal with immediate effect, either the personnel office or the immediate superiour will define the policy.