Instead of this title, i think it would be more adequate to have: IDENTIFICATION AND CREATION OF GUIDELINES AND TOOLS This obviously implies the collection of international good practices but goes beyond - just collecting practices doesn't seem to be enough considering the fast development of technologies - we should have a more serious and effective proposal, that would produce outcomes to be used in the future.

I think it would be useful also to create lists, updated periodically, that identify providers that ensure data privacy. Some big names in cloud cannot comply with European regulations on data privacy. Maybe create a kind of badge that identify companies or tools that comply.