Healthcare exchanges must utilize personal and confidential data about their users. Write a one-paragraph policy that stipulates responsible processing and storage of these data.