Managing data to comply with regulation