Legal Challenges in Data Protection