Data protection and the human error curse