How we think about protecting data