Recommendations on privacy, data access and compliance

.@philsimon chimes in with trust- and privacy-related recommendations