Three General Data Privacy Principles