5. Data protection
5.4 Provide traceability