In that case, the same policies would apply. Our office gathers and processes a great deal of personal information. Our human resources department is made up of two advisers and myself. Our office is very small and our practice from the outset has been that confidentiality is critical. We do not need a policy on that and employees would be informed about the need to keep information confidential in order to keep the working atmosphere positive.
On February 7th, 2013. See this statement in context.