reworded requirement about sensitive information repositories