. . . "Most often all this activity is driven by compliance mandates ??? meaning that there are penalties for not properly controlling certain types of information, most often personal information." .