A key basic principle of the UK GDPR is you method private data securely via ‘suitable complex and organisational measures’ – this is the ‘protection basic princ