Establish a policy to ensure that confidential information is consistently handled and monitored, including in compliance and regulatory oversight reviews.