The Board must ensure that policies and procedures are in place to ensure that necessary customer confidentiality is maintained.