Rules and regulations and data protection