data privacy and security enforcement