An information management program is simply a tool that provides a framework for making well-reasoned decisions regarding the company's processing of personal information.