How will the state obtain data from an independent exchange that is obliged to ensure the privacy of its users?