Data security in commercial transactions | Guidance Notes