This document discusses principles for protecting personal data, including legitimacy, finality, transparency, proportionality, and end-to-end protection. It references basic and enhanced legitimacy layers and lists countries that have an adequate level of protection for personal data as well as options for ensuring protection when transferring data internationally.