https://gdpr-info.eu/art-32-gdpr/
Once you link the actual law, it becomes more of a checklist and less of a principle though.