Policy Brief: Principles for Responsible Data Handling