Create data-policies.xml

still missing ATLAS as there's no okay yet, addressing #515