Data Protection Principles for the 21st Century