Best Practices for Data Protection and Privacy by