What are the requirements for data compliance?