On their end, no, we don't specifically. We do have record-keeping requirements, but how they protect that is really up to them in terms of how they institute their own protections of private data.
On January 28th, 2019. See this statement in context.