What sensitive data needs to be accessed?