DATA PROTECTION AND LEGAL OBLIGATIONS