• De-identify when you can
  • Collect as little as possible
  • Be transparent
  • Keep information safe