As a privacy officer at a biotechnology company doing business in California and the European Union (EU), your business client would like to spearhead a project and has asked for your advice. This project will use wearable devices to collect patient level data from California and EU patients in a clinical study to identify risk factors for diabetes. Cite and discuss 10 key points of advice and recommendations you would provide to your business client in order to comply with the CPRA and GDPR.