consumer law and data protection