It must not cross ministerial boundaries. Unlike in many government where there is a single data processor shared by all the different parts of the government, here, each ministry gets its own DPA, and they must not share raw data. That reduce the tech service quite a bit.