An organization is conducting a privacy maturity assessment. Which item represents the highest level of maturity in privacy policy development?