Principle 7: Protecting respondent information