Meeting applicable data protection laws and regulations by implementing appropriate technical and organisational measures to enable lawful data processing