data protection operation