This presentation will describe our interlocking work on practical ethical guidance for data controllers, a trust framework for accreditation, and ways to improve users' privacy choices.