Through the use of mixed research methods we document and analyse information controls including technical and non-technical (regulatory and social controls). We also make policy recommendations with the goal to bridge technology and policy.