ICO: Learning from mistakes of others..

Online services.. – good list of controls that your friendly British Privacy Regulator strongly suggests..

https://ico.org.uk/media/for-organisations/document/1042221/protecting-personal-data-in-online-services-learning-from-the-mistakes-of-others.pdf