Working Paper No. 9 - Protection Categories in Data Protection Certification