data protection enforcement