guidelines that establish the basis for minimizing the risk of data breaches, ensuring accountability, and demonstrating lawful, fair and transparent processing, integrity and confidentiality, data quality, limitation of purpose, and minimization of personal data.