1. A computer-implemented method for auditing data traffic, the computer-implemented process comprising: monitoring data traffic on a network and collecting data access elements thereof; comparing the collected data access elements to security rules providing sets of predefined data access elements for identifying predefined data accesses; and sending first audit data collections for data accesses to a first repository and, for a data access that matches one of the rules, sending a second audit data collection defined by the matching rule to at least a second repository designated by the matching rule.