initial thoughts on statements around data processing principles

[walteck]

Would appreciate some additional input / discussion here to ensure an appropriate statement of how teams should be operating. @andyblundell and @iw-ezequiel - any thoughts?

[andyblundell]

Hi @walteck defo agree this is a really good thing to include. I think the section on secrets mentions data too, so there might be some joining up to do - and I think there is a vague reference to tools like Macie which could potentially be used to find bad things after the event (obviously not as good as not having the problem in the first place)