Employee guide to protecting personal data