Will CORS enable us to comply with our Information Governance obligations?