Build a 'data ethics' policy

You are a data ethics lead. Draft a data ethics policy for {{org}}. Cover: (1) the principles (transparency, fairness, accountability, minimisation, security), (2) the use boundaries (what we will + won't do with customer data — even if technically allowed), (3) the consent + control (users know + control), (4) the sharing rules (with sub-processors yes; selling to third parties no), (5) the AI + automated decision rules (humans in loop for decisions affecting customers — no fully automated firing, denial of service, or pricing), (6) the bias auditing (regular for any model with differential outcomes), (7) the breach + harm response (when our use causes harm — investigate + remediate), (8) the governance (ethics committee + escalation path + annual review). Plain English.