Data protection: time to take action