http://www.bakermckenzie.com/en/insight/publications/2017/03/global-privacy-handbook
ICO: Learning from mistakes of others..
Online services.. – good list of controls that your friendly British Privacy Regulator strongly suggests..
[protecting people by good design, solid security, efficient processes and trusted services]