Data protection for member-based organisations