Where is the sensitive data that needs regulating?