Accountability, Controllers and Processors, Data minimisation, Principles, Representative, Technical and Organisational Measures (TOMs)