policy of openness about developments, practices and policies with respect to personal data