Each project that handles data differently has its own policy. Everything else is covered by the general one.