Using your industry as a guide, research the regulations that apply to managing personal data

and build a summary report on how this will meet your organisational requirements.

Based of Australia regulation!