The Elements of a Sound and Secure Data Protection Strategy