Vulnerability and Data Protection Law