Data security and privacy – FAQ