There are strict rules on privacy and data that must be followed