Opinion articles 29 11 2016 Best practices, procedures, and encryption: New steps towards the 2018 GDPR objective