Data management and security processes are key to PoPIA compliance