The Business End of Data Protection