When do Regulatory Data Protection Controls occur?