Data Security and Protection Agreement Guidance Notes