If you mean an example of how a city or a government should go about ensuring.... I have already given the example of contracting for data in the hands of private sector companies. I do think it's important that governments set basic standards for any personal information they'll be acquiring from private sector companies or aggregated information that requires citizens to use apps. If you'll be collecting app data from certain types of apps, then maybe you should say that you will only purchase data from companies that set these basic standards in their policies.
On February 14th, 2017. See this statement in context.