Which of the following requires special handling and explicit policies for data retention and data distribution