How well are agencies actually complying with the DATA Act?