Proposed Standards for Certification and Recertification in Privacy Law