How to comply with data protection regulations?