Collect a limited amount of data
Do not use users’ data for purposes other than for which you collected it
Make sure to keep access to data limited
Respect the rights of data subjects
Care for communication