data mandates