Data security, compliance, and practices