New data protection guidance for app developers