Data protection and legal issues