Implementation of data protection controls