Lab 4: Define a data protection rule