protecting client data