What to know when considering a data protection plan