Information technology - Security techniques - Code of practice for personally identifiable information protection