Platforms often store personal data subject to security clauses in data protection regulations such as gdpr or the data protection act. when hosting this type of sensitive data on a platform, how does an organization account for these considerations?