DPE Model Data Protection Policy without CCTV info