I guess Randolf is asking if SAP has it's own guideline how it's going to respond to data breach on HCP platform. I guess that's what potential customers of HCP are asking for. Obviously, SAP must comply with local regulations but it can get pretty complex really quickly. What if customers are in US as well as in EU and so on.
Cheers