product user data protection measures