## 7.5 Data Protection and Privacy
Data protection is associated with numerous legal requirements and privacy concerns. In addition to compliance with general data protection and privacy acts, it's necessary to consider compliance with industryspecific legislation in different countries/regions.
SAP provides specific features and functions to support compliance with regard to relevant legal requirements, including data protection. SAP does not give any advice on whether these features and functions are the best method to support company, industry, regional, or country/region-specific requirements. Furthermore, this information shouldn't be taken as advice or a recommendation regarding additional features that would be required in specific IT environments. Decisions related to data protection must be made on a case-by-case basis, taking into consideration the given system landscape and the applicable legal requirements.
##  Note
SAP does not provide legal advice in any form. SAP software supports data protection compliance by providing security features and specific data protection-relevant functions. In many cases, compliance with applicable data protection and privacy laws will not be covered by a product feature. Definitions and other terms used in this document are not taken from a particular legal source.
##  Caution
The extent to which data protection is supported by technical means depends on secure system operation. Network security, security note implementation, adequate logging of system changes, and appropriate usage of the system are the basic technical requirements for compliance with data privacy legislation and other legislation.
## Generic Fields
You also need to make sure that no personal data enters the system in an uncontrolled or non-purpose related way, for example, in free-text fields, or customer extensions.
##  Caution
Don't enter personal data in fields, such as global and subaccount names, Cloud Foundry orgs and spaces names, database names, and tenant names. Personal data in such fields can't be detected and removed during data deletion requests. Even if such cases could be identified, removing such data may lead to disruptive and unexpected behavior in our services. The previous list of example fields isn't complete.
## SAP BTP
This documentation covers personal data relating to SAP BTP accounts and data stored in databases by SAP BTP. SAP BTP offers a number of capabilities, that is, services, buildpacks, application, and so on. Here we cover the core platform. For more information about data protection and privacy for capabilities you've purchased, see the data protection and privacy documentation for those capabilities.
To view the services consumed by a global account:
1. Navigate to the global account to which you'd like to view members. For more information, see Navigate to Orgs and Spaces [page 2512].
2. In the navigation area, choose Entitlements .
This documentation is written with the data protection officer of a company in mind. The processes described here may be required for a data protection officer or an administrator of the user accounts for your tenants or even business users of the tenants. In particular the processes for business users are described here so that you in your role of data protection officer or account administrator can communicate them to your business users if required.
Users are stored in the platform identity provider.
- Global account users are stored in platform identity provider or a tenant of SAP Cloud Identity Services.
- Platform users are stored in platform identity provider, a tenant of SAP Cloud Identity Services, or your own identity provider.
- Business users are stored in a tenant of SAP Cloud Identity Services or your own identity provider.
## Related Information
Glossary for Data Protection and Privacy [page 3275] Change Logging and Read-Access Logging [page 3277] Personal Data Record [page 3277] Deletion [page 3278] Consent [page 3284]