Text this: Data protection law and practice