Regulatory compliant data migration