data retrieval regulations