"Adequate level of data protection"