compliance and data loss