Personal Data Protection Committee criteria 1