Document your collection and processing of data; protect it in transit to and from third parties; prevent misuse and breaches as much as is possible. Fix problems when things go wrong, provide redress when data is misused, leaked, or breached; be morally and legally accountable to regulatory systems.