How to protect information provided for regulatory approval