Data Protection in the Financial Services Industry