Community schemes must protect the personal information they process