Windows

I'm looking for samples or guidance on creation of a published policy which covers handling of sensitive or confidential data by a PC technician during routine service.

We're not so much looking for a confidentiality agreement that a technician would need to sign, more of document that IS publishes to business units and it's customers which covers policy in this area. The point isn't to address the controversy seen in the media recently regarding Tech's inadvertantly discovering pornography, more covering typical sensitive information.

Examples would be:
A system crashes and the technicans need to handle sensitive data during a recovery process.

During routine troubleshooting, documents or other material which may be seen by a technician.

Anyone have a sample of something given to the customer outlining their policy with respect to such data?

Thanks in advance!