smb data protection compliance