A Data Protection Architecture for Derived Data Control in Partially Disconnected Networks