In the context of biometrics professional, which principle most directly governs biometric data security and privacy practices?