tobacco data protection